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1.0  INTRODUCTION 
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The  motivation  and  genesis  of  this  work  was  developed  in  earlier  reports[l]. 
Effort  during  this  period  has  focused  upon  some  rather  specific  problems  and  has 
produced  results  which  have  been  submitted  for  publication. 

Work  is  presently  focused  upon  the  use  of  statistical  methods  for  providing 
on-line  monitoring.  The  philosophy  of  this  approach  is  given  in  Section  2. 
Section  3  defines  and  describes  results  which  have  been  obtained  in  terms  of 
developing  the  output  probability  of  sequential  circuits  as  a  function  of  input 
probabilities.  Section  4  discusses  the  evaluation  of  the  effectiveness  of 
monitoring  the  behavior  of  output  statistics;  specifically,  the  generation  of 
the  probability  of  escape  using  a  statistical  pin-fault  model.  The  final 
section  describes  the  results  obtained  to  date  and  outlines  the  direction  for 
future  work.  Appendices  describing  software  tools  developed  to  date  are  also 
included. 
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2.0  REFERENCELESS  ON-LINE  MONITORING  USING  OUTPUT  STATISTICS 

2.1  Introduction 

The  work  presented  here  stems  from  an  earlier  effort  at  Research  Triangle 
Institute  [2,3]  to  investigate  the  feasibility  of  a  standard  built-in-test  (BIT) 
circuit  suitable  for  use  with  a  family  of  digital  electronic  modules.  The 
search  for  a  standard  approach  to  BIT  is  motivated  by  the  hope  that 
standardization  will  make  the  inclusion  of  test  circuits  a  more  natural  and 
effective  part  of  the  system  design  procedure. 

Work  described  here  is  presently  directed  toward  statistical  procedures  and 
takes  as  a  beginning  point  the  assumptions  given  in  Table  2.1. 

Table  2.1  Test  Assumptions 


1.  The  testing  ODjective  is  to  detect  faults  in  modular  digital 
electronic  equipment  which  has  been  fielded,  i.e.,  has  passed  design 
and  manufacturing  acceptance  tests. 

2.  The  testing  objective  is  to  detect  multiple  as  well  as  single  logic 
faults,  and  although  it  is  not  clear  what  the  response  to  intermittent 
faults  will  be,  they  are  not  specifically  excluded. 

3.  The  BIT  circuit  will  monitor  on-line  operations  of  a  digital  module  and 
will  not  alter  normal  processing. 

4.  The  behavior  of  a  module  being  monitored  will  be  characterized 
statistically  assuming  stationary  and  independent  input  statistics. 
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2.2  Fault  Detection  Strategy 

Deterministic  testing  procedures  attempt  to  identify  explicit  input  test 
vectors  which  detect  the  presence  of  failures  by  comparing  the  present  network 
output  to  the  known  good  result  or  reference.  Previously,  manufacturers  faced 
with  a  large  volume  of  circuits  requiring  lengthy  tests  resorted  to  a  technique 
using  random  input  sequence,  an  approach  which  compared  the  response  of  a  so- 
called  "gold  unit"  and  a  unit  under  test  to  the  same  random  inputs.  This 
technique  led  to  research  directed  toward  establishing  a  sounder  theoretical 
basis  for  probabilistic  testing  approaches  [4-10]. 

As  one  would  expect,  the  most  substantial  results  to  date  are  for  combina¬ 
tional  networks.  In  particular,  precise  methods  have  been  defined  for  deriving 
the  probability  that  an  output  is  active,  as  a  function  of  the  probabilities  for 
each  input,  as  indicated  by  Parker  and  McCluskey  [5,6],  Parker  and  McCluskey 
have  also  shown  that  there  exists  a  set  of  input  probabilities  such  that  no  two 
n-variable  combination  functions  have  the  same  output  probability  for  these 
inputs.  The  relevant  implication  of  this  result  is  that  a  fault-free  function 
may  be  distinguished  from  every  faulty  function  if  the  input  probabilities  are 
properly  controlled.  While  some  work  with  sequential  networks  [9,10]  has  been 
reported,  no  practical  methods  exist  for  deriving  outputs  probabilities  as  a 
function  of  input  probabilities.  Work  is  continuing  on  more  effective 
procedures.  The  referenceless  on-line  monitoring  strategy  proposed  here 
is  summarized  in  Table  2.2. 

While  there  are  a  number  of  statistics  which  may  be  considered,  we  are  at 
present  only  considering  the  number  of  active  values  (ones  or  zeroes)  of  a 
signal  over  an  experiment  of  length  N. 


Table  2.2  A  Standard  BIT  Strategy 


For  a  module: 

A  priori 

1.  Define  a  set  of  points  to  be  monitored.  In  general,  these  will 
include  inputs  (X)  ,  outputs  (Z_) ,  and  internal  state  values  (SJ . 

2.  Derive,  for  the  states  and  outputs,  an  expected  value  of  the 
statistics  Es(x)  and  Ez(x)  as  a  function  of  the  input  statis¬ 
tics  X. 

3.  Derive  a  test  stringency  e  and  test  length  based  on  a  desired 
test  quality,  false  alarm  rate,  and  escape  rate.  This  will 
involve  the  definition  of  a  fault  model  and  the  fault  density 
functions  0  (x,z),  0  (x,s). 

On-line 

T.  During  system  execution,  the  fault  monitor  will: 

a.  Gather  statistics  on  X,  S^,  and  Z  for  an  experiment  of 
length  N. 

b.  Indicate  a  failure  if  a  measured  statistic  (e.g.,  mz)  is 
outside  the  acceptance  window  for  the  expected  value  of 
this  statistic,  as  a  function  of  the  measured  input  statis¬ 
tic  mx;  that  is,  the  experiment  fails  if  mz  >_  EZ(mx)  +  e  or 

mz  ^  EZ(mx)  -  e 

and  passes  otherwise. 


2.3  Evaluating  Effectiveness 

The  approach,  as  described  thus  far,  holds  nondisruptive  on-line  monitoring 
as  a  primary  goal.  This  position  does  not  preclude  the  active  insertion  of  test 
vectors  during  idle  periods;  however,  a  totally  passive  monitor  has  a  number  of 
advantages.  For  this  reason,  the  effectiveness  of  passive  monitoring  will  be 
considered  first. 

Losq  [8]  has  shown  that  as  a  bound  the  probability  of  a  False  Alarm  (FA)  is 
given  by 

prob(FA)  <  erfc 

This  parameter  is  a  function  only  of  the  length  of  the  experiment  N  and  the 
stringency  e  applied  to  the  measured  statistics  (ms,  mz).  On  the  other  hand, 
the  probability  of  Escape  (ES)  is  much  more  complex  and  depends  upon  a  fault 
density  function  0(Ez(x))  which  describes  the  number  of  faulty  networks  which 
produce  Ez(x)  +  e  and,  hence,  are  indistinguishable  from  the  good  network. 
Clearly  the  probability  of  escape  is  strongly  related  to  the  input  statistics  of 
the  current  experiment.  If  the  input  statistics  to  a  particular  module  in  a 
particular  system  and  for  a  particular  application  are  stationary,  and  if 
0(Ez(x))  can  be  computed,  then  the  prob  (ES)  is  fixed  for  a  given  N  and  e.  The 
value  of  this  parameter  may  be  improved  by  increasing  N  and  decreasing  e  with 
the  attendant  effects  on  the  false  alarm  rate  and  time  required  to  detect  a 
failure. 

At  this  point,  the  desirability  of  adding  an  active  fault  insertion 
capability  to  the  monitor  may  be  seen  by  noting  that,  in  general,  the  prob  (ES) 
may  be  improved  (lowered)  by  controlling  the  input  probability  at  a  desirable 
value. 
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2.4  Status  and  Conclusions 

In  order  to  use  a  statistical  approach  to  fault  monitoring  it  is  necessary 
to  develop  a  procedure  for  describing  output  statistics  as  a  function  of  the 
input  statistics  (e.g.,  £z(x)).  While  this  is  difficult  for  general  sequential 
circuits,  the  expressions  for  sequential  primitives  (flip-flops,  converters, 
shift  registers)  have  been  derived  and  will  be  reported  elsewhere.  Work  is 
continuing  on  the  derivation  of  module  level  expressions  as  a  composite  of 
primitive  elements. 

A  more  complex  problem  exists  with  the  derivation  of  the  fault  density 
function  0(Ez(x)).  While  it  is  possible  to  develop  0  by  the  enumeration  of 
faulty  functions,  this  is  impractical  and  no  suitable  analytic  procedure  has 
been  developed,  except  for  limited  cases  [8],  This  function  is  essential  to  the 
evaluation  of  the  probability  of  escape.  The  development  of  a  suitable  method 
for  generating  the  fault  density  function  for  a  general  network  is  the  primary 
focus  of  this  research.  In  addition  to  these  primary  concerns,  this  research 
has  also  brought  into  focus  the  essential  need  for  a  fault  model  which  is  more 
useful  than  the  conventional  stuck-at-one,  stuck-at-zero  version.  The  set  of 
realistic  faults  for  a  system,  their  probability  distribution,  and  the  resultant 
influences  on  behavior  at  the  network  terminals  are  extremely  difficult  to 
define  or  represent  and  is  essential  to  meaningful  quantitative  results. 

Another  and  somewhat  newer  concern  which  has  surfaced  is  the  need  to 
characterize  the  input  patterns  found  at  module  interfaces  throughout  the 
system.  Is  the  assumption  of  stationarity  and  independence  of  module  input 
statistics  a  reasonable  position? 

The  simulation  and  analytic  results  obtained  to  date  have  provided  some 
encouragement.  Statistical  monitoring  is  attractive  since  its  application  may 
be  made  standard  and  does  not  involve  either  the  generation  of  test  vectors  or 
the  extensive  computation  required  when  a  reference  is  used.  At  the  present 
time  the  primary  drawbacks  to  statistical  monitoring  are  the  lack  of  computa¬ 
tionally  feasible  procedures  for  output  and  density  functions,  as  well  as  the 
lack  of  understanding  of  the  behavior  of  faults  and  input  patterns  which 
strongly  influence  the  effectiveness  of  the  approach. 
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3.0  SEQUENTIAL  CIRCUIT  OUTPUT  PROBABILITIES  FROM  NETWORK  REALIZATIONS 


3.1  Introduction 

The  idea  of  using  random  sequences  as  test  patterns  for  digital  electronic 
networks  was  born  out  of  a  practical  need  to  cut  the  cost  of  developing  deter¬ 
ministic  test  sequences.  This  approach  involves  driving  a  reference  unit,  which 
is  assumed  to  be  fault-free,  and  a  unit-under- test  with  the  same  random 
sequence,  while  comparing  their  respective  outputs.  The  practicality  and 
effectiveness  of  using  random  test  sequences  have  been  treated  extensively  in 
the  literature  [1,2].  This  concept  has  evolved  and  now  there  is  considerable 
interest  in  a  more  general  view  of  non-deterministic  testing. 

Non-determini  Stic  testing  involves: 

1)  the  description  of  a  network  input  stream  as  distributions  of  a  set  of 
independent  random  variable(s),  and 

2)  the  characterization  of  the  distributions  of  a  set  of  dependent  random 
variables  representing  the  response  of  a  fault-free  network  to  these 
inputs. 

Underlying  this  strategy  is  the  hypothesis  that  the  presence  of  a  fault  will 
alter  the  distribution  of  the  response  sufficiently  to  detect  its  presence. 

Present  accomplishments  fall  significantly  short  of  this  general  problem 
objective.  The  intention  of  this  paper  is  to  pursue  a  more  limited  non-deter- 
ministic  testing  goal  which  is:  Given  the  description  of  a  realization  of  a 
network  as  an  interconnection  of  more  primitive  sub-modules  (e.g.,  as  found  in 
any  typical  design  automation  system);  derive  the  expression  for  the  probability 
that  an  output  is  equal  to  one  as  a  function  of  the  probability  that  the  primary 
inputs  are  equal  to  one. 

The  papers  which  are  central  to  the  development  of  this  work  will  be  sum¬ 
marized  to  provide  the  essential  background.  Even  a  stopped  clock  is  correct 
twice  a  day  and,  similarly,  a  digital  signal  has  some  probability  of  being 
correct,  defined  even  in  the  presence  of  faults.  Ogus  [3]  uses  this  notion  and 
develops  procedures  by  which  signal  probabilistic  models  for  primitive  logic 
elements.  This  concept  was  extended  by  Parker  and  McCluskey  [4,5]  and 
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procedures  were  given  for  the  derivation  of  output  probabilities  for  general 
combination  networks.  Parker  and  McCluskey  had  shown  earlier  [6]  that  there 

exists  a  set  of  input  probabilities  x,,x?,...x  given  by  -  _ 1 _ 

such  that  all  n  variable  combination  functions  have  distinct  2^  +1  values 
of  output  probabilities.  This  result  substantiates  the  underlying  hypothesis 
that  faults  in  combinational  networks  will  perturb  output  probabilities.  No 
such  result  exists  for  sequential  networks. 

Far  less  has  been  done  to  develop  similar  results  for  sequential  networks. 
The  important  concept  of  error  latency,  which  is  applicable  to  combination 
circuits  as  well,  was  presented  by  Shedletsky  and  McCluskey  [7].  Their  error 
latency  of  a  fault  is  the  number  of  input  vectors  applied  to  a  network  with  that 
fault  until  the  first  incorrect  output  vector  is  observed. 

Work  specifically  concerned  with  the  output  probability  behavior  of 
sequential  circuits  has  proceeded  from  behavioral  models.  Markov  chains  can  be 
defined  from  state  tables  or  diagrams  [9]  and  Parker  and  McCluskey  have 
demonstrated  the  derivation  from  regular  expression  descriptions  [8]. 

We  will  develop  procedures  which  utilize  network  realizations  rather  than 
behavior  models.  This  point  of  view  is  motivated  by  the  belief  that  the 
probabilistic  test  strategy  will  be  a  portion  of  a  design  automation  system. 

The  next  section  considers  the  generation  of  output  probabilities  for 
certain  common  functions  which  will  then  be  treated  as  library  descriptions  for 
derivations  involving  more  complex  composite  networks.  General  composite 
networks  are  then  treated  in  Section  3. 


3.2  Output  Probabilities  for  Common  Functions 

In  this  section  we  will  consider  the  output  probability  expressions  for: 

1)  general  combinational  networks, 

2)  flip-flops, 

3)  n-bit  shift  registers,  and 

4)  n-bit  binary  modulo  2n  counters. 

Methods  have  already  been  presented  for  handling  general  combinational 
networks  [4,5].  Method  1  of  reference  [5]  uses  the  minterm  canonical 
description  of  a  function  as  the  model  for  derivation  and  hence  is  a  behavioral 
approach.  A  second  method  is  given  which  allows  a  function  to  be  modeled  by  an 
equation  in  any  desired  form;  thus,  it  is  suitable  for  treating  realizations. 
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All  inputs  and  gate  outputs  are  assigned  a  unique  symbol  and  the  input  variables 
are  considered  to  be  mutually  independent  statistically.  The  output  probability 
is  derived  by  moving  from  primary  inputs  to  outputs  using  the  first  five  basic 
properties  given  in  Table  3.1,  which  is  an  update  to  Table  3.1  in  reference  [5], 
Upper  case  letters  are  used  for  variables  and  lower  case  for  the  probability 
that  the  variable  is  true.  The  development  in  [5]  makes  use  of  an  unstated 
conjecture  that  if  the  primary  input  variables  are  independent,  then  all 
internal  variables  are  likewise  independent,  even  at  reconvergent  fanout  points. 
This  notion  is  also  used  here  along  with  the  additional  observation  that,  to 
insure  a  valid  output  probability  expression  for  a  combinational  network,  the 
expression  must  be  written  in  a  sum-of-products  form. 

Example  1  Consider  the  combinational  module  of  Figure  3.1.  The  development  of 
the  output  expression  is  given  by 

d  =  be, 

e  =  l-(l-b)  (1-c)  *  b+c-bc, 

g  *  de  if  d,  e  are  independent  and  by  substitution 
g  *  bc( b+c-bc) ,  (1) 

g  =  b2c+bc2-b2c2  (2) 

and  finally  by  table  1  [4,5] 

g  -  be.  (3) 

Clearly  the  probability  value  obtained  for  g  will  be  different  if  equation 
1  or  2  is  used  rather  than  equation  3.  It  can  be  stated  then  that  a  valid 
output  probability  expression  or  a  general  combination  network  may  be  obtained 
from  the  sum-of-products  form  of  the  probability  equation  which  was  derived  by 
Method  2  [5].  It  should  also  be  noted  that  the  network  of  Example  1  is 
redundant  and  the  sum-of-products  expression  obtained  is  still  valid;  hence,  no 
special  processing  is  required  to  remove  redundancy  from  a  design  file. 


Figure  3.1  Redundant  Network  for  Example  1 
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Table  3.1  Combinational  Gate  Probability  Models 


•Generalized  in  Table 


Next  let  us  consider  the  derivation  of  steady  state  output  probabilities 
for  a  simple  sequential  network,  a  JK  flip-flop.  We  will  first  derive  this 
expression  using  the  familiar  Markov  chain  methods  and  then  we  will  develop  the 
same  expression  considering  the  flip-flop  to  be  a  realization  composed  of 
simpler  primitives. 

Example  2  [10]  Figure  3.2  shows  the  Markov  model,  transition  matrix  for  a  JK 

fl  i  p-flop. 

The  steady  state  probabilites  are 


the  probability  that  Q=1 
the  probability  that  Q=0 . 

The  same  result  can  be  obtained  by  solving  the  equation  set 

PA  ■  jPB  *  (l-UPj 
PB  =  (l-j)Pg  +  kPg 


(4) 

(5) 


(6) 


Example  3  [10]  A  gate  realization  for  a  JK  flip-flop  is  given  in  Figure  3.3a. 
The  approach  will  be  to  derive  an  output  probability  expression  for  the 
combinational  network  and  then  use  that  as  a  library  function  in  the  derivation 
for  the  composite  network  of  Figure  3.3b.  Thus, 


y*  =  J  •  y  +  K  •  y 


(7) 


which,  treated  as  a  combinational  function  and  utilizing  Table  3. 1(1, 2, 3),  gives 


y*  *  1  -  ( 1 - ( j )  ( 1 -y ) )  (1-  (1-k)  (y ) )  (8) 


which  in  sum-of-products  is 


y*  s  j+y-jy-ky 


(9) 
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a)  JK  flip-flop 


b)  Markov  model 
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j+k  J 

)  transition  matrix  d)  steady  state  transitions 


Figure  3.2  Markov  Model  for  a  JK  Flip-Flop 


Figure  3.3  A  JK  Flip-Flop  as  a  Composite  Realization 


Now,  consider  the  composition  of  Figure  3.3b. 

Q(t)  =  Y*( t-1 ) 
and 


q(t)  =  y*(t-l) 

When  Equation  (9)  is  substituted  into  Equation  (11) 

q(  t)=j  ( t-1  )+y  ( t-1  )-j  ( t-1  )y ( t-1 )  -k(  t-1  )y  ( t-1 ) 


and 


(10) 


(11) 


q(t)-y(t-l)=j(t-l)-y(t-l)( j(t-l)+k(t-l))  (12) 


which  by  Table  1  (5)  and  q(t)*y(t)  reduces  to 


y  (t-1) 


i (t-i) 

j  (t-i)+k(t-l) 


and  in  the  steady  state  is 


y  =  q 


(13) 


(14) 


which  is  in  agreement  with  the  Markov  development  (4)  since  PA  =  q. 

This  derivation  may  be  questioned  since  y*,  from  the  combinational  block 
(9),  was  derived  under  the  assumption  that  J,  K,  and  Y  are  independent.  The 
fact  that  Y  is  made  equal  to  Y*(t-1)  through  feedback  makes  this  assumption 
questionable.  Notice,  however,  that  at  any  point  in  time  J(t),  K(t)  and  Y(Y*(J 
(t-1) ,K ( t-1 ) ) ) .  That  is,  Y  is  independent  of  J,K  if  J(t-l) ,K( t-1 )  are 
independent  of  J(t),  K ( t) .  The  general  applicability  of  this  strategy  will 
evolve  throughout  this  paper. 

Example  4  Consider  the  collection  of  combination  and  sequential  blocks  of 
Figure  3.4,  which  is  a  4-bit  shift  register  similar  to  a  7495  TTL  device. 
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The  output  probability  expression  for  the  combinational  block  is  given  by 


di  =  1  -  si  mi  +  ai  mi 


(14) 


where  m=l  is  a  load  and  m  is  a  shift. 

Using  the  previous  result  for  a  JK  flip-flop 


qi  ' 


and 


h  =  i  -  di'  Ki 


di 


Therefore, 


and 


V1  s  s  1  -  di 


si+l  =  sim.-aimi 


(15) 

(16) 


The  probability  that  a  particular  output  is  one  in  the  steady  state  may  be 
computed  recursively.  For  example, 

s3  =  s0m0mlm2  +  a0m0rnlm2  +  aimim2  +  a2m2*  (17) 

Property  6  of  Table  1  applies  and  since  all  m  are  of  equal  value 


-3 


-2 


=  SqIti  +  aginm  +  a^irun  +  a2in, 


(18) 


This  expression  may  be  verified  using  Markov  analysis.  Generalizing  this 
expression  we  obtain 


M  Ji-j-D 


Si  =  s0™  +  I  a'  ^ 

j=0  3 


(19) 


If  the  probability  of  obtaining  a  particular  shift  value  is  desired  (for 
example,  0100),  it  is  written  as 

sls2a3®4  =  (1-s]_)  a2  (l-s3)  (l-s4)  .  (20) 
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The  general  expression  for  a  shift  register  output  bit,  given  by  Equation  (19), 
can  now  be  used  as  a  library  function  for  future  compositions. 

Example  5  In  the  manner  of  Example  (4),  a  counter  (Figure  3.5)  may  be 
characterized  by  defining  the  various  modes  as 

R  =  low,  reset  a  =  pt*L’R 

PT  =  high,  count  enable  8  =  PT*L-R 

L  =  low,  parallel  load  y  =  L-R 


A 

r  ' 

B 

c 

D 

i _ 

RFSFT  „ 

ENABLE  r 

i  nan  ^ 

r 

-qa 

'Qb 

b 

O 

oD 

CLOCK 

Figure  3.5  Counter  -  74163  Type 


which  results  in  the  probability  of  any  particular  output  being  given 
recursively  as 


ydi+8hi 

qi  -  2ydi+28hi+r 


(21) 


where  d1-  is  the  probability  of  a  1  at  the  input  to  bit  i  and 

i-1 

h.  =  n  q.  i>l 
j=0  3 


(22) 


which  can,  in  turn,  be  used  to  derive  the  following  expressions  for  total  state 
values  (count  value) 
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N-l 


where  is  the  probability  of  a  parallel  load  value  of  K.  For  example,  if 
k=3,  then  for  a  four-bit  counter  i 3=^3^2<^1<^0 *  ax>P^ i cabi  1  i "ty  of 

these  derivations  is  demonstrated  by  Figures  3.6  and  3.7.  These  curves  were 
generated  for  the  counter  of  Example  5  using  a  set  of  assumed  probabilities  as 
noted.  The  surface  describing  the  probability  of  being  in  state  sl  is  given 
in  Figure  3.6  as  a  function  of  the  LOAD  and  RESET  probabilities.  If  the  package 
input  associated  with  C  is  stuck-at-one,  then  this  surface  is  altered  as  shown 
in  Figure  3.7.  Clearly,  the  ability  to  detect  this  fault  is  dependent  upon  the 
module  input  statistics  [10,11,12]. 
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0  .  5 


Load  (L) 
Count-enable 


clock 
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reset 


3  =  0.3 
C  =  0  .  3 
D  =  0.1 
PT  =  0.9 


a.  counter  package  and  constant  input  probabilities 


b.  probability  of  vs.  LOAD  and  RESET 

Figure  3.6  Output  Probability  Versus  Input  Probability  for 
a  Synchronous  Counter 


3.3  Output  Probabilities  for  General  Composite  Networks 

The  objective  of  this  section  is  to  clarify  the  general  applicability  of 
the  ideas  exemplified  in  the  last  section.  The  approach  taken  to  this  point  has 
been  to  use  the  Markov  model  to  validate  expressions  derived  using  network 
realizations.  General  rigorous  formalisms  have  not  yet  been  developed;  however, 
there  are  useful  operational  properties  which  may  be  tentatively  identified. 

Consider  a  complex  system  to  be  made  up  of  an  interconnection  of  modules 
(Figure  3. 8),whose  output  probability  expression  has  been  tabularized  in  a 
library.  Any  output  of  such  a  module  may  in  general  be  either  combinational  or 
sequential . 


f . . (h. , , • • -h.  ) 
u  ii'  in' 


firo(hii'"*hin) 


Figure  3.8  A  Module  with  Output  Probability  Expressions 

Vie  will  first  look  at  systems  which  are  loop-free,  as  in  Figure  3.9.  There 
is  no  feedback  in  the  module  interconnections.  In  processing  a  network  the 
objective  is  to  generate  probability  expressions 


z^x)  *  z-  e  z 

proceeding  from  inputs  to  outputs,  making  substitutions  in  the  appropriate 
f^jfh)  library  functions.  Properties  1  and  2  of  Table  2  describe  the  forms 
of  fu  and  hj  at  individual  modules. 

In  evaluating  a  network  from  primary  inputs  x  to  primary  outputs  z  at  each 
module,  a  substitution  of  the  previously  generated  h.  ( ;<)  value  is  made  in 
fij(h).  This  substitution  may  result  in  product  terms  involving  a  single 
primary  input  variable  with  various  degrees  of  exponentation.  These  cases  are 
handled  differently  for  combinational  or  sequential  f^(h)  as  shown  by 
Properties  3  and  4  of  Table  3.2.  When  making  a  substitution  into  a  sequential 
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Figure  3.9  A  General  Loop-Free  Interconnection  of  Modules 
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Table  3.2  Probabilistic  Models  for  Logic  Modules 
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Additive  or  subtractive  probabilities  follow  normal  laws  of  algebra  for 
combinational  or  sequential  f .  .  (h)  . 


fyth),  an  exponentation  of  an  exDonented  variable  may  result  and  is  treated 
as  indicated  by  Property  5,  Table  3.2. 

At  the  present  time,  formal  proofs  for  these  properties  have  not  been 
generated.  They  stand  as  conjectures  which  have  been  utilized  successfully  in  a 
number  of  examples. 

Structures  involving  intermodule  feedback  may  be  modeled  in  the  classic 
form  shown  in  Figure  3.10.  and  M2  may  be  compositions  of  other  modules  and 
will,  in  general,  be  sequential.  The  resolution  of  this  structure  follows  the 
form  given  by 


z(x)  *  (x.x(£*(x)))* 


(25) 


x 

y 


Figure  3.10  Block  Diagram  Of  a  System  with  Intermodule  Feedback 


/ 


The  derivation  of  the  desired  expression  of  output  probabilities  z  as  functions 
of  only  primary  input  probabilities  x  requires  the  solution  of  a  set  of 
simultaneous,  nonlinear  equations.  Only  preliminary  work  has  been  done  with 
this  class  of  networks. 
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3.4  Summary 

The  testing  of  digital  networks  by  examining  statistics  of  behavior  rather 
than  absolute  behavior  is  attractive  for  a  number  of  reasons.  In  order  to  apply 
this  approach  it  is  necessary  to  be  able  to  describe  the  expected  values  of  a 
set  of  dependent  variables  as  functions  of  the  expected  values  of  the 
appropriate  independent  variables.  At  the  present  time  the  statistic  which  is 
most  often  used  is  the  number  of  occurrences  of  an  active  signal  on  a  line 
during  a  specified  time  period.  This  event  may  be  stated  as  the  probability  of 
occurrence  of  a  signal  over  an  experiment  of  N  time  trials.  In  this  paper 
methods  are  described  for  computing  the  expected  value  of  this  output 
probability  as  a  function  of  input  signal  probabilities.  This  derivation 
requires  that  the  network  be  described  as  a  realization,  that  is,  a  design  file 
description  of  the  interconnection  of  modules,  which  are  library  functions  whose 
probability  behavior  has  been  catalogued. 

We  have  demonstrated  the  approach  for  some  specific  examples  and  in  the 
process  have  generated  some  useful  library  descriptions.  In  addition,  the 

properties  (Tables  3.1  and  3.2)  which  are  useful  in  generating  composite  ex¬ 
pressions  for  larger  networks  are  given  as  conjectures. 

Considerable  effort  and  future  research  will  be  required  to  produce  the 
rigorous  proofs  which  are  essential  before  these  ideas  can  be  widely  used. 

Effort  is  continuing  in  that  direction. 


1-29 


REFERENCES 


1.  Parker,  C.  P.,  "Compact  Testing:  Testing  with  Compressed  Data",  Proc.  of 
the  Int'l,  Conf.  on  Fault-Tolerant  Computing  (FTCS-6),  June  1976,  pp. 
93-96. 

2.  Hayes,  J.  P.,  "Transition  Count  Testing  of  Combinational  Logic  Circuits", 
IEEE  Trans,  on  Computers,  Vol.  C-25,  No.  6,  June  1976,  pp.  613-620. 

3.  Ogus,  R.  C.,  "The  Probability  of  a  Correct  Output  From  a  Combinational 
Circuit",  IEEE  Trans,  on  Computers,  Vol.  C-24,  No.  5,  May  1971,  pp. 
534-544. 


4.  Parker,  K.  P.,  and  McCluskey,  E.  J.,  "Analysis  of  Logic  Circuits  with 
Faults  Using  Input  Signal  Probabilities",  IEEE  Trans,  on  Computers,  Vol. 
C-24,  No.  5,  May  1975,  pp.  573-578. 

5.  _ ,  "Probabilistic  Treatment  of  General 

Combinational  Networks",  IEEE  Trans,  on  Computers,  Vol.  C-24,  No.  6,  June 
1975,  pp.  668-670.  ~  ‘  *~ 

6.  _ _ ,  "Boolean  Network  Probabilities  and 

Network  Design",  Technical  Mote  No.  60,  Digital  Systems  Lab,  Stanford 
University,  July  1975. 

7.  Shedletsky,  J.  J.  and  McCluskey,  £.  J.,  "The  Error  Latency  of  a  Fau.t  in  a 
Sequential  Digital  Circuit",  IEEE  Trans,  on  Computers,  Vol.  C-25,  No.  6, 
June  1976,  pp.  655-659. 

8.  Parker,  K.  P.  and  McCluskey,  E.  J.,  "Sequential  Circuit  Output 

Probabilities  From  Regular  Expressions",  IEEE  Trans,  on  Computers,  Vol. 
C-27 ,  No.  3,  March  1978,  pp.  222-231.  . . 


Isaacson,  D.  L.  and  Madsen,  R.  W.,  Markov  Chains: 
Applications,  Wiley  and  Sons,  1976. 


Theory 


10.  Ardalan,  S.  H. ,  "Statistical  Fault  Monitoring  of  Sequential  Circuits", 
Master  of  Science  Thesis,  Dept,  of  Elec.  Engr.,  NC  State  University, 
December  1978. 


11.  Gault,  J.  U.  and  Ardalan,  S.  H.,  "Referenceless  On-Line  Monitoring",  Proc. 
of  the  Government  Microcircuits  Applications  Conf.,  November  1978. 


Gault,  J.  W. ,  et  al.,  "Sample  Fault  Monitoring",  Basic  Research  in  Support 
of  Concurrent  Fault  Monitoring  in  Modular  Digital  Systems,  Interim 
technical  report.  Research  Triangle  Institute,  RTP,  NC,  June  1978. 


1-30 


4.0  A  STATISTICAL  PIN-FAULT  MODEL 


4.1  Introduction 

Primary  to  the  evaluation  of  the  probability  of  escape  and  therefore  to  the 
determination  of  effectiveness  of  a  given  test  is  the  derivation  of  the  fault 
density  function.  Specifically,  the  probability  of  escape  is  related  to  the 
fault  density  function  p  (z)  [1]  according  to  the  expression 

N(Zj+c)  i 

prob(pass  test/faulty)  =  j  j  (Tj)  zK  ( 1-z )  J-Kb  ( z )  dz 

K=>J  ( z  ■  -£  )  • 

3  o 

where  N  and  £  are  the  test  length  and  stringency,  respectively.  The  function  <t> 
(z),  which  depends  on  the  input  statistics,  is  derived  for  a  given  circuit  under 
a  specified  fault  model.  In  Section  2  we  developed  a  statistical  fault  model 
under  the  pin-fault  assumption  proposed  by  Ketelsen  [2].  Section  3  showed  how 
the  fault  density  function  for  a  module  is  obtained  from  the  statistical  fault 
model  and  knowledge  of  the  output  probability  expression.  An  algorithm  for 
computing  the  fault  density  function  will  be  given  in  this  Section  [3].  This 
algorithm  will  be  used  to  compute  the  escape  probabilities  of  an  integrated 
sequential  circuit  example  in  Section  5. 


4.2  Statistical  Pin-Faul t  Model 

An  appropriate  fault  model  for  fielded  digital  electronic  equipment  is  the 
pin-fault  model  proposed  and  justified  by  Ketelson  [2],  This  model  incorporates 
faults  occurring  due  to  "lead  bonds"  failures  of  input  or  output  transistors,  or 
failures  due  to  improper  connection  of  the  package  pins  to  the  silicon  chip,  for 
example.  According  to  this  model,  the  input  and  output  pins  of  integrated  cir¬ 
cuits  experience  stuck-at-one  or  stuck-at-zero  faults. 

In  this  section  a  stati stical  pin-fault  model  will  be  developed  for  digital 
synchronous  sequential  circuits.  The  abstract  model  of  a  synchronous  sequential 
circuit  is  shown  in  Figure  M.  In  this  model  inputs  occur  at  discrete  intervals 
of  time  and  each  application  of  inputs  results  in,  at  most,  one-state  transi¬ 
tion.  The  delay  elements  are  implemented  using  suitable  flip-flops  (master- 
slave  or  edge  triggered)  to  insure  proper  synchronous  operation. 


COMBINATIONAL 
|  LOGIC 


We  will  now  examine  the  model  in  order  to  determine,  in  an  abstract  way, 
the  effect  of  various  faults  on  the  statistics  of  the  outputs.  Referring  to 
Figure  4.1, stuck-at-faul  ts  at  the  outputs  yj  of  the  delay  elements  cause  the 
number  of  states  to  decrease.  This  causes  significant  deviation  of  the  faulty 
circuit  statistic  from  the  fault-free  statistic,  particularly  if  the  outputs  are 
the  internal  states  of  the  machine.  This  deviation  of  output  statistics,  due  to 
faults  on  the  delay  element  outputs,  is  thus  immediately  detectable.  The  same 
arguments  can  be  stated  for  faults  on  the  D-type  delay  element  input  lines.  If 
the  delay  elements  are  implemented  with  JK  flip-flops,  the  nature  of  the  effects 
of  faults  on  the  input  lines  of  the  delay  elements  is  more  complicated.  Faults 
on  the  inputs  of  set-reset  flip-flops,  however,  cause  the  outputs  to  be  stuck-at 
-one  or  stuck-at-zero  and  are  therefore  detectable,  as  in  the  case  of  D-type 
flip-flops. 

Unlike  the  faults  mentioned  above,  faults  occurring  on  the  input  lines 
to  the  sequential  circuit  may  cause  minor  changes  in  the  output  statistics.  For 
example,  a  failure  may  change  the  transition  from  state  0i  to  Oj  under  input 
\  (0<Ak<2  ^-1) .  According  to  losq  [1],  "these  failures  will  be  far  more 
difficult  to  detect  because  their  effect  on  the  system  operation  is  somewhat 
limited  (in  a  statistical  sense)".  Faults  occurring  in  the  combinational  logic 
also  may  cause  minor  changes  in  output  statistics. 

Therefore,  since  faults  occurring  at  the  input  pins  to  the  sequential 
circuit  dominate  other  faults,  we  propose  a  fault  model  that  considers  faults, 
we  propose  a  fault  model  that  considers  faults  to  occur  only  at  the  input  pins 
of  the  sequential  circuit.  Hence,  if  the  test  strategy  is  capable  of  detecting 
faults  at  the  input  pins,  faults  at  the  delay  elements  and  output  pins  are  also 
detected.  This  fault  model  is  known  as  the  pin-package  fault  model.  Note  that 
we  exclude  faults  occurring  in  the  combinational  logic,  since  we  are  dealing 
with  fielded  integrated  circuits.  Faults  occurring  in  the  combinational  logic 
have  a  very  low  probability  of  occurrence  compared  to  faults  at  the  input  pins 
(i.e.,  for  a  silicon  chip  the  probability  that  a  si ngle  gate  function  fails  is 
very  low  for  fielded  integrated  circuits).  However,  an  advantage  of  statistical 
testing  of  the  outputs  is  that,  although  knowledge  of  the  effect  of  faults  in 
the  combinational  circuit  on  the  output  is  difficult  to  analyze,  it  can  be  shown 
that  most  faults  cause  deviations  from  the  fault-free  statistics  and  are  thus 
detectable.  The  exculsion  of  the  analyses  of  these  faults  in  the  fault  model 
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greatly  simplifies  the  analyses  of  the  problem  and  makes  the  systematic  analyses 
of  the  test  strategy  possible  while  at  the  same  time  taking  into  account  a  large 
percentage  of  the  high  probability  faults. 

In  our  discussion  below,  we  will  be  concerned  with  integrated  circuit 
implementations  of  the  model  in  Figure  4.1.  in  this  case,  we  only  have  access  to 
the  input  and  output  pins  of  the  circuit.  Thus,  in  the  pin-fault  model  faults 
in  the  form  of  stuck-at-one  or  stuck-at-zero  faults  occur  only  on  the  input  and 
output  pins.  We  place  no  restriction  on  the  number  of  pins  that  can  be  at 
fault. 

The  total  number  of  faulty  input  combinations,  assuming  stuck-at-one  and 
stuck-at-zero  faults  at  the  pins  of  an  input  circuit,  is 

Nf  -  3l  -1  (2) 

If  we  let  k  denote  the  number  of  pins  at  fault,  then  the  number  of  possible 
combinations  of  k  stuck-at  faults  is 


nf  =  2K  (*)  (3) 

We  assign  a  probability  to  the  probability  that  k  pins  are  at  fault 
simultaneously.  We  then  have 


z 


K=1 


Pk  -  1 


(4) 


It  is  reasonable  to  assume  that  the  probability  of  occurrence  of  multiple 
pin-faults  is  a  decreasing  function  of  the  number  of  faulty  pins;  that  is,  Pk 
decreases  as  k  increases.  In  this  paper  we  use  the  model 


However,  any  other  model  can  be  employed.  Thus,  in  the  statistical  fault  model 
considered,  the  probability  of  faults  at  the  input  pins  decreases  exponentially 
as  the  nunber  of  simultaneous  faulty  pins  increases.  The  exponent  coefficients 
corresponding  to  the  number  of  input  pins  i  is  listed  in  Table  4.1. 
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Table  4.1  Number  of  Input  Pins 


Number  of  incut  pins 

X 

1 

0 .6931472 

2 

1 .574520 

3 

2 .040524 

4 

2 . 358062 

5 

2.598983 

6 

2.793101 

7 

2.955652 

8 

3.095474 

9 

3.218129 

10 

3.32738 

11 

3.425883 

12 

3.515547 

13 

3.597834 

14 

3 . 673863 

15 

3.744524 

16 

3 . 810523 

Let  the  variable  f  be  an  integer  defined  in  the  interval  l£f <3-^-1.  Then 
each  integer  f  defines  a  specific  fault  configuration  with  a  corresponding 
number  K  simultaneous  pin-faults.  We  thus  define  the  function  g(f)  as  the 
probability  of  the  occurrence  of  the  faulty  configuration  f. 

This  function  will  be  used  in  the  derivation  of  the  fault  density  function 
in  the  next  section.  The  variable  f  can  be  ordered  such  that  the  number  of 
faulty  pins  specified  by  faulty  configuration  f  increases  as  f  increases.  The 
function  g  (f)  plotted  against  such  an  ordering  of  f  is  shown  in  Figure  4.2. 
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Figure  4.2  Pin-Fault  Probability  Distribution  Example 


4.3  Derivation  of  <j>(z) 

In  this  section  the  fault  density  function  will  be  derived  for  a 
synchronous,  sequential  integrated  circuit  using  the  statistical  pin-fault 
model.  Let  the  function  relating  the  output  probabilities  to  the  input 
probabilites  be  Z^TU^^.-.-.x^).  Under  the  pin-fault  assumption,  only 
stuck-at-zero  or  -one  fa^ts  occur  at  the  input  pins.  Thus,  when  input  line 
xi .  i=l,2,...  is  at  fault,  the  faulty  output  statistic  is  either 

Zf-T(xi»x2» ...Xi_i,0,...x^)  (6) 


or 


^f_T(xi >x2»  • . .x.j_^,l, . .  .x^)  (7) 

depending  on  whether  the  pin  is  stuck-at-zero  or  stuck-at-one. 

Again,  let  the  integer  f  be  in  the  region  l<f<3^-l.  Then  each  integer  f 
defines  a  faulty  configuration  and,  as  will  be  shown  in  the  next  section,  the 
corresponding  faulty  output  statistic,  Zf,  as  a  function  of  the  integer  f, 
assuming  fixed  input  statistics,  can  be  expressed  as 

lf  =  T(f )  (3) 

where  T(f)  is  related  to  T(x,  ^....x^),  the  fault-free  transfer  function. 

The  fault  density  function  0(z)  is  the  density  of  fault  circuits  that  have 
been  output  statistic  z.  We  can  thus  arrive  at  an  expression  for  0(z)  in  terms 
of  the  functions  Zf=T(f)  and  g(f). 

This  expression  is  given  in  (10).  If  we  define 


6 [ Z-T ( f ) )  = 


1.0  if  Z=T ( f ) ,  i.e. r  z  =  Zc 
0.0  if  Z  /  T(f) . 


(9) 
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then 


^(Z)  =  l  & Cz-T(f) ]q (f ) 
f=l 

1 

As  a  check  to  the  above  derivation,  we  note  that  [  o(z)dz=l. 
relation  to  (10)  we  have  o 


(10) 

Applying  this 


1  3^-1 


3*-l 


d>  (Z)  dz=  l  6  (Z-T(f)  ]g(f)  dZ=  J  g(f)  '  S  [Z-T (f )  ] dZ 


3-1 

=  l  g(f)  =  1. 

f=l 


The  following  section  presents  an  algorithm  for  computing  d(z),  i.e., 
evaluating  Equation  (10)  on  a  digital  computer.  This  procedure  is  then  used  to 
calculate  accurately  the  escape  probability  for  digital  sequential  integrated 
circuits  in  a  defined  test. 


4.4  Algorithm  for  the  Calculation  of 


The  mathematical  discussion  in  Section  3  suggested  an  algorithm  for  the 
computation  of  the  fault  density  function.  We  shall  first  attempt  to  develop  a 
method  for  obtaining  a  fault  configuration  (ordered  in  increasing  number  of 
faulty  pins). 

The  total  number  of  faulty  configurations  is  N=3np-1.  Where  np  is  the 
number  of  input  pins.  We  define  the  integer  f  in  the  region  0<f£N.  Expanding  f 
in  powers  of  3  we  obtain 


f  =  +  3a2  +  3  + 


no-1 

e  •  x  _ 


where  ^=0,  1,  or  2.  Thus,  each  integer  f  is  defined  by  a  set  [a1 ,»2. . .anp]. 

We  shall  define  <3^=2  to  mean  that  pin  i  is  fault-free  and  ^-=0  or  1  to  mean 
pin  i  Is  stuck-at-zero  or  -one,  respectively.  Thus,  if  np=4,  the  set  [2102] 
representing  f*2+3+0+27x2=59  means  pin  numbers  one  and  four  are  fault-free,  pin 
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number  two  is  stuck-at-one,  and  pin  number  three  is  stuck-at-zero. 

We  can  obtain  the  faulty  output  statistic  corresponding  to  a  faulty 
configuration  [a-j  .  -anp]  by  defining  coefficients  si  according  to  (11)  and 
(12)  and  relating  the  coefficients  8,  to  a-,-. 


Zf  -  T  (BiX1,32X2,  •  "6iXi,  •  •  X 


np  np 


(13) 


Xj_  pin  i  is  fault-free  (rt.=  2) 
0  pin  i  is  s-a-0 
1  pin  i  is  s-a-1 


SiXi  =  0  pin  i  s-a-0  ( ct .  =  0 ) 


'-‘i-D 


(14) 


From  Equation  (14)  we  observe  that 


ai  “  0 


Ji  *  VXi  a.  =  1 


=  2 . 


(15) 


We  thus  obtain  a  relationship  Detween  and  -x-  which  can  be  expressed 


as 


*i  =  ~T  ( 1+  (ai-2 ) X ± ] 


(16) 


X.--2 


which  satisfies  Equation  (15)  if  =  _i _ .  Substituting  for  v^,  we  obtain 

the  equation  xi 


~l :  X  .  -  2 

3i  “  ~T  UM.-2)  -!_■ 


relating  ^  to  ^ . 


x . 

i 


(17) 


We  are  now  in  a  position  to  present  the  algorithm  for  computing  0(z).  The 
first  step  is  to  generate  the  coefficients  in  the  order  of  increasing 
number  of  faulty  pins,  for  each  set  of  coefficients,  there  is  a  corresponding 
probability  defined  by  the  relation  P^e "ak,  where  k  is  the  number  of 

faulty  pins  in  the  faulty  configuration  defined  by  the  coefficients.  Thus,  as 
the  coefficients  are  generated,  the  probability  density  function  g(f)  of  faulty 
configurations  f  is  also  generated.  From  Equation  (17)  the  coefficients  3  • 
are  derived.  Using  these  coefficients,  the  output  probability 
corresponding  to  the  faulty  configuration  f  is  obtained  using  Equation  (13). 
Finally,  as  the  functions  g(f)  and  Zf=T(f)  are  obtained  through  this 
procedure,  the  fault  density  function  is  calculated  using  the  relationship  of 
Equation  (10).  The  above  algorithm  has  been  implemented  in  FORTRAN. 

We  have  thus  developed  a  fault  model  which  is  computationally  feasible  and 
which  has  a  reasonable  coverage  of  high  probability  faults.  In  addition,  we 
have  shown  how  the  fault  density  function  0{z)  can  be  derived  using  this  model. 
The  final  step  of  using  6  to  compute  the  probability  of  escape  is  treated  in  the 
next  section. 


4.5  Computational  Results 

In  this  section  the  probability  of  escape  is  calculated  and  results  are 
presented  for  a  typical  synchronous  sequential  integrated  circuit.  The 
computations  are  done  using  the  algorithm  described  in  the  previous  section. 

The  results  are  verified  by  computer  simulations  of  the  devices  under  various 
faulty  configurations.  In  the  simulations,  pseudorandom  inputs  are  applied  and 
the  statistics  of  the  monitored  outputs  of  the  device  are  collected.  If  the 
output  statistics  are  within  the  specified  range  of  the  fault-free  statistics, 
the  devices  pass  the  test.  Thus,  the  criterion  for  passing  a  simulated  test  can 
be  summarized  by 

N(Zi-e  )  <  Zc  <  M(Z1  +  s)  (18) 

where  Zc  is  the  number  of  occurrences  of  a  one  at  the  output  and  N,  ,  and 
z.j  are  the  number  of  simulations  (test  length),  test  strigency,  and  fault-free 
statistic,  respectively.  It  may  be  required  that  all  outputs  satisfy  the  above 
condition. 


The  logic  diagram  of  a  two-bit,  right-shift  parallel-load  shift  register  is 
shown  in  Figure  4.3.  The  relationships  between  output  and  input  probabilities 
(steady  state)  are  given  in  Table  4.2.  Using  these  relationships  and  the 
statistical  pin-fault  model,  the  probability  of  escape  was  obtained  for  each 
output.  These  results  were  based  on  specific  input  probabilites  given  in  Table 
4.3  and  a  test  length  N=10,000  and  test  stringency  e=0.01.  In  obtaining  the 
results,  the  statistics  of  one  pin  was  varied  between  zero  and  one,  while  the 
statistics  of  the  remaining  pins  were  held  constant.  Figures  4.4  through  4.7  show 
that  very  good  testing  regions  exist  where  the  probability  of  escape  is 
extremely  low.  For  instance,  with  the  input  statistics  given  in  Table  4.3  the 
probability  of  escape  by  monitoring  state  B  is  Pesc=2.58  x  10-11. 

These  results  suggest  that  statistical  methods  are  useful  in  testing  this  type 
of  circuit.  In  fact,  if  the  input  statistics  are  controllable  and  we  use  the 
plots  obtained,  tests  resulting  in  extremely  low  escape  probabilities  can  be 
designed  (pesc=5.3  x  IQ"17  for  m=0.8,  s=0.5,  a=0.3,  and  b=0.2  by 
monitoring  state  A,  N=1Q,QQ0,  =.01).  However,  in  an  on-line  environment  where 
prior  knowledge  of  the  input  statistics  exists  and  are  uncontrollable,  using  the 
computational  procedures  developed,  the  escape  probability  and  therefore  the 
test  efficiency  can  be  evaluated  for  a  given  experiment  [4].  The  plots  obtained 
for  the  probability  of  escape  show  that  if  the  inputs  exhibit  random  behavior  in 
an  on-line  situation,  regions  exist  for  which  statistical  testing  of  circuits  is 
quite  attractive  (i.e.,  low  probability  of  escape). 

In  addition,  the  results  show  that  in  some  regions  where  the  probability  of 
escape  is  high  for  some  states,  it  is  low  for  others.  This  suggests  monitoring 
the  statistics  of  a  number  of  states  (outputs)  simultaneously  to  achieve  a  low 
escape  probability  over  a  wide  region  of  input  statistic  variation.  For 
example,  by  monitoring  both  states  A  and  B,  the  escape  probability  will  be  low, 
as  the  statistics  of  pin  B  in  the  range  0.1  <  b  <  0.9. 


a 


State 
A  (00) 
B  (01) 
C  (11) 
D  (10) 


Table  4.2  State  Probabilities 

_ Output  Probability  Expression 

(sm-ssm^-sam  m*  +  bam) 
(sm-s  m  -samm  +  bam) 
s^m^  +  asmm-i-mab 

m^ss+mmsa+bam 

n  m  prob.  of  mode  input 

3  s  prob.  of  serial  input 

?.  a  prob.  of  parallel  load  input  A 

3  b  prob.  of  parallel  load  input  3 


Table  4.3  Input  Probabilities 


Input  Pin 

Probability  j 

Mode  (M) 

O 

oo 

Serial  in  (S 

) 

0.5 

Parallel  in 

(A) 

0.3 

Parallel  in 

(B) 

0.6 
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5.0  SUMMARY  OF  RESULTS  AND  FUTURE  WORK 
5.1  Summary  of  Results 

Results  during  this  last  period  have  culminated  in  the  papers  lifted  in 
Table  5.1.  In  addition,  preliminary  work  has  begun  on  the  development  of 
software  tools  to  support  both  analysis  and  simulation  of  alternative  approaches 
to  sampled  monitoring.  These  programs  are  given  in  the  appendices.  Graduate 
student  research  support  provided  during  this  contract  has  resulted  in  an  MS 
thesis. 


Table  5.1  Results  Fall  1978 


1.  Gault  and  Ardalan,  "Referenceless  On-line  Monitoring",  Proceedings  of 
the  Government  Microcircuits  Applications  Conference,  Monterey,  CA, 
November  1978. 

2.  ,  "Sequential  Circuit  Output  Probabilities  From  Network 
Realizations" ,  Submitted  to  the  1979  International  Fault  Tolerant 
Computing  Symposium  to  be  held  in  June  1979. 

3.  _ ,  "A  Statistical  Pin  Fault  Model",  Submitted  to  The  Johns 

Hopkins  Conference  on  Information  Sciences  and  Systems  to  be  held  in 
March  1979. 

4.  "Statistical  Fault  Monitoring  of  Sequential  Circuits"  for  Mr.  Sasan  H. 

Ardalan.  This  thesis  is  in  the  final  stages  of  preparation  and  will  be 
included  in  the  next  report. _ _ 


5.2  Future  Work 

The  results  in  statistical  fault  monitoring  [Table  5. 1-1, 2, 3]  have 
illuminated  the  next  level  of  questions  to  be  addressed.  The  direction  of 
proposed  work  can  be  categorized  into  three  types  of  effort: 

1)  Continued  development  of  theoretical  concepts  and  analysis  models  for 
sampled  monitoring  [Section  5.2.1], 

2)  Specification  and  development  of  software  tools  for  analysis  and 
simulation  modeling  in  support  of  the  theoretical  concept  development 
[Section  5.2.2],  and 
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3)  Experimental  validation  and  "proof  of  concept"  of  both  theoretical 
results  and  simulation  models  utilizing  a  hardware  textbook  [Section 
5.2.3]. 

5.2.1  Theoretical  Concept  Development 

Two  fundamental  issues  which  have  surfaced  in  the  development  of  the 
theoretical  approaches  to  generating  network  probability  responses  are  the  ideas 
of:  1)  signal  statistic  independence  in  feedback  environments  and  2)  signal 
statistic  stationarity  in  operational  system  environments.  Issue  1  can  be 
attached  as  a  theoretical  question  and  preliminary  results  are  given  in  [Table 
5.1  (2)].  Initially,  issue  2  can  best  be  approached  experimentally,  (see 
Section  5.2.3)  and  then  treated  theoretically.  The  crux  of  the  theoretical 
development  concerning  both  independence  and  stationarity  is  to  be  able  to 
derive  a  monitoring  strategy  and  to  quantify  its  sensitivity  to  these 
properties. 

We  have  noted  that  one  important  measure  of  effectiveness  of  a  statistical 
fault  monitor  is  the  probability  of  escape  Pesc*  Pesc  is  a  function 
of  the  length  of  test  ( N ) ,  the  range  of  values  of  input  statistics,  and  the 
output  probed. 

For  a  fixed  output  probe  and  a  fixed  value  of  N,  suppose  we  plot  P0SC 
as  a  function  of  the  input  statistics.  If  there  are  many  input  lines,  the  plot 
will  be  multidimensional.  It  is  reasonable  to  assume  a  threshold  on  P0SC 
(say  P^)  so  that  if  actual  value  of  Pesc  >  P^,  we  say  that  the  test  is 
unsatisfactory;  otherwise  it  is  satisfactory.  Clearly  "valleys"  in  the  above 
plot  are  desirable.  From  the  plot  (or  analytically)  we  can  predetermine  the 
ranges  of  input  statistics  for  which  the  test  is  satisfactory. 

If  we  were  conducting  the  test  off-line,  then  it  is  clear  that  we  will 
control  the  input  statistics  to  be  in  the  desirable  range  determined  above.  In 
the  on-line  environment,  however,  we  are  not  able  to  control  the  input 
statistics.  But  we  can  probe  all  input  lines  and  make  on-line  estimates  of  the 
corresponding  statistic.  Now  if  the  estimated  input  statistics  fall  in  the 
desirable  range,  then  we  are  tempted  to  conclude  that  the  test  is  satisfactory. 
However,  if  the  input  statistic  is  non- stationary,  then  the  above  conclusion  may 
be  false. 

Although,  input  statistics  are  likely  to  be  non-stationary  in  general,  we 
surmise  that  stationarity  exists  in  a  "local"  sense.  The  behavior  of  inputs 
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may  imply  a  sudden  change  in  input  probabilities.  This  phase-type  behavior  is 
analogous  to  program  behavior  in  a  paging  system.  Indeed  if  we  probe  the  page 
indices  (which  are  the  inputs  to  the  memory  system)  they  are  likely  to  exhibit 
such  a  behavior.  If  we  assume  such  a  phase-type  behavior,  then  the  estimates  of 
input  statistics  as  will  be  reliable  enough  for  us  to  make  conclusions  about  the 
test.  Of  course,  the  length  N  of  the  test  should  be  short  enough  to  avoid 
embracing  several  phases  and  long  enough  to  provide  a  good  estimate  of  the  input 
statistic  (Ct.  law  of  large  numbers).  Additional  factors  affecting  the  choice 
of  N  are  the  MTDF  (which  is  likely  to  increase  with  N),  the  Pgsc  (which  is 
likely  to  decrease  with  N),  and  PpA  (which  decreases  with  an  increase  in  N). 
Determining  the  optimal  value  of  N,  is  thus  a  very  interesting  problem  that  we 
hope  to  solve. 

The  next  question  is  what  do  we  do  when  it  is  determined  that  the  input 
statistics  outside  the  desirable  range  and  hence  the  test  is  not  satisfactory. 
There  appear  to  be  several  alternatives:  a)  probe  another  output  point.  In 
other  words,  assume  that  for  each  range  of  input  statistics,  we  have 
predetermined  that  most  desirable  output  probe,  b)  change  the  length  of  test  N. 
Thus  we  will  be  working  with  a  dynamically  changing  test  length,  c)  declare  the 
inability  of  the  on-line  monitor  to  perform  a  satisfactory  test.  We  may  take 
the  unit  off-line  for  further  tests. 

The  former  two  alternatives  imply  quite  a  few  interesting  problems,  both, 
at  the  theoretical  and  experimental  level. 

In  addition  to  these  concerns,  there  are  other  issues  of  theoretical 
concern  (given  in  Table  5.2)  which  also  require  concentrated  effort. 

Table  5.2  Theoretical  Issues  of  Importance  to  Sampled  Monitoring 

1.  Signal  statistic  independence  in  feedback  environments. 

2.  Signal  statistic  stationarity  in  operational  environments. 

3.  Statistical  fault  models  which  are  accurate  and  computationally 
feasible. 

4.  Selection  of  monitoring  points  in  a  network  for  increased  fault 
detection  potential. 

5.  Investigation  of  the  effectiveness  of  a  variety  of  monitoring  schemes 
including  statistics  other  than  the  probability  of  an  output  being 
one. 

6.  Sequential  ratio  testing  -  Variable  length  monitoring. 
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5.2.2  Software  Analyses  and  Simulation  Tools 

In  order  to  employ  the  techniques  being  developed  to  provide  built-in¬ 
testing  capability,  a  designer  would  like  to  be  able  to: 

1)  Determine  a  set  of  suitable  monitoring  points  for  a  module, 

2)  Determine  the  expected  performance  at  these  monitor  points  a  priori  to 
on-line  operation,  so  that  the  monitoring  device  may  be  parameterized, 

3)  Determine  performance  trade-off  which  results  from  various  choices  of 
monitoring  points,  experiment  length,  and  performance  stringency.  The 
primary  performance  characteristics  are: 

a)  probability  of  escape, 

b)  probability  of  false  alarm,  and 

c)  detection  latency 

4)  Simulate  the  performance  obtained  for  a  given  set  of  parameterized 
monitors  and  assumed  fault  population. 

Preliminary  effort  has  been  undertaken  in  some  of  these  areas.  However, 
there  is  a  need  for  overall  specification  and  planning  to  allow  for  reasonable 
long-term  progress. 

In  the  process  of  doing  research,  offhanded  tool  development  is  often 
undertaken.  However,  in  the  long  run,  serious  effort  directed  explicitly  toward 
tool  specification  and  development  is  required  to  obtain  a  meaningful 
capability. 

5.2.3  Experimental  Work 

Experimental  work  has  a  solid  reputation  in  certain  areas  of  study  and  so 
precedent  does  exist  for  experimental  research.  The  area  of  faul t- tolerant  com¬ 
puting  is  reasonable  for  experimental  projects.  The  credibility  of  theoretical 
claims  which  are  otherwise  unvalidated  in  a  practical  way  can  be  validated 
experimentally.  The  experimental  work  proposed  here  has  begun  as  a  correlary 
effort  to  the  more  central  theoretical  effort.  A  PDP-8  of  the  late  1960 's 
provides  a  vehicle  by  which  actual  test  point  monitoring  and  fault  insertion  can 
be  employed  since  the  technology  of  the  machine  is  SSI  (see  Figure  5.1). 
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Figure  5.1.  Experimental  Environment. 
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The  primary  goal  of  this  effort  is  to  carry  out  hard  experiments  which  are 
strongly  related  to  soft  experiments  done  by  means  of  simulation  (Section 
5.2.2).  This  will  include  the  important  signal  statistic  stationarity  while 
executing  operational  programs  (Section  5.2  introduction). 

The  Microcomputer  Development.  System  (labeled  A  in  Figure  5.1)  will  be  used 
as  the  primary  user  interface.  This  module  will  provide  the  capabilities 
defined  in  Table  5.3.  After  an  experiment  is  defined,  the  target  machine 
(labeled  B)  will  begin  executing  an  operational  program.  Unit  C  will  sample, 
according  to  parameterization  from  A,  the  activity  of  the  execution.  Results  of 
sampling  will  be  reported  back  to  unit  B  from  C  and  will  be  logged  along  with 
the  experimental  conditions. 


Table  5.3  Statistical  Experimentation  Functional  Capabilities 


Unit  A. 

Operator  Input  and  Experiment  Control /Logginq 

1. 

Specify  fault  model  including  insertion  points  and  duration. 

2. 

Experiment  supervision  including  length,  stringency,  and  other 
parameters  passed  to  unit  C. 

3. 

File  capability  for  experiments  and  results. 

Unit  B. 

Target  System 

1. 

Run  operational  programs. 

2. 

Control  program  selection  and  repetition. 

3. 

Run  self-diagnosis  programs. 

Unit  C. 

Monitor  Module 

1. 

Sample  operational  activity  of  unit  B. 

2. 

Accepts  parameters  [length  and  frequency  of  samples, 
stringency,  monitor  points]. 

3. 

Report  results  to  Unit  A. 
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The  experimental  work  proposed  seems  to  be  a  very  natural  and  essential 
next  step  in  developing  the  ideas  of  operational  fault  monitors.  An  obvious 
application  for  such  monitors  is  to  embed  them  within  VHSI/VLS1  chips  in  order 
to  report  back  device  status  and  thus  reduce  error  latency  and  data  pollution. 
Experimenting  in  an  SSI  environment  is  an  attractive  first  step  prior  to 
tackling  the  more  sophisticated  LSI  world.  The  outcome  of  this  work  will  be  to 
transition  important  theoretical  ideas  into  an  important  application. 


i 

1 
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APPENDIX  A 

PROGRAMS  FOR  COMPUTATION  AND  SIMULATION 
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DC  2 C  <  =  l  .  \P 

0  0  =  2 

20 

lNF(NP,L  N  (  N*  )  .K  ;  =BC  (  <  > 

0053 

l  0 

CC  N  T  I  MU 5 

00  =  4 

COMPUTE  u(< )  .  ZF(<». 

0055 

r 

«.K  sj 

c 

"  l -  IS 

The  NUMBER 

OF  PINS  AT  r  aji.  t  . 

0O3o 

>057 

DC  4 J  (M 

<1*1 

,  ,NP 

r.  ) 


1-60 


OOSF 

<’->  V  -►  <  *  (  -  AL  l,H4  *  I  ) 

00  5  9 

N  <  a  1 

0  C  60 

.or-  I  <r|  ,(<l 

a  06  i 

41 

N  K  3  N  fc  «  2 

0  0  6  2 

(3Q  <*?  <«  1  tf»K 

0063 

CALL  itCCKF(K,Kl,m:) 

00  €  <• 

LNN=LNl I ) 

0065 

DO  4C  J  3 1  • L NN 

0066 

CO  4rt  { K  = l . NP 

0067 

4-3 

> 

A 

II 

006  0 

IL  =  0 

0069 

1C  4  7  I  k  3  I  ,  .\p 

0070 

i  f  (  i  nf  (  i ,  j ,  r  <  ) •  me •  o  >  cc* T,%  i  ^ 

007  i 

t  L=  1 1 M 

0  C  7  2 

a( : <  j  =ec( il ) 

0  C  7  3 

47 

CCNT  INUE 

0  C  7  4 

3C  500  41=1 .NP 

0075 

A  R  =  A  (  M  I  ) 

0076 

IF  (  A  IN(  ?1  1  )  .N£»0  *0  )GOTO  vQ'4 

0077 

n(Ml ) =0, c 

007* 

fF(A?iEa»l)5(MNsl,0 

OC’9 

GOTO  500 

0000 

494 

P  (  -11  J=AK/2,0«(  l  .  JM  A<?-£#  0  »  «  (  /•  IV 

00  0  1 

500 

CCN7INU5 

0002 

R  3H(  J  ) 

3  0  0  3 

L  =  a ( 2) 

CO04 

3T  =  C  (  J  ) 

000  5 

CO  50  1  M  f  = 1  *  N0 I T 

OO0D 

r 

5  01 

AIN2CM  )=R(  3  +  Ml  | 

000  7 

CALL  C'^TAT  (  «  ,L  tPT  .  3  .  NO  I  7  #PC*  'VC 

0  0  0  9 

<<s<K*l 

ocas 

31  <<  )  (3 

0  U  9  0 

ZF (<<)=$(  ISTA  tz  ) 

009  l 

46 

CUNT l NUE 

0092 

4  5 

co.v  r  iNue 

0  C  9  J 

40 

CCNT : NUL 

z 

CALC 

ULAT  ION  OF  OH  I  1  Z) 

0  J9  a 

02= l . 3/\AZ 

'J  0  9  j 

7-20  =  02/0 .0 

jo  ;6 

*|PZ 

3  09  7 

vr  I  'CTf  T,  ,  1  J  j  r  3  7 

CO  9  a 

113  rroMiri /10a,*5T 

0  09<J 

1C  u  J  )  I  3  l  ,  N  F  z  1 

0  100 

-’  =  (  1  -  1  >  *  c  z 

0  10  1 

ZL=Z-3Z2 

0  1  02 

7  m  -  j  ♦<“> 

G  1  03 

FUM  =  0  •  0 

0  104 

00  63  0  *  = l  »  K  K 

0  105 

.37  .ZL 

0  106 

L50  CJN7I-IUE 

0  13  7 

I  i  I  )  -SUM 

oi  oe 

c  <  !  l =1 

•  A  NO  •  (  Z  F  {  K  )  *L  1  i 


u  :i  « 1 1  \u*_ 

r  vlC'JL  U?  'JniJAMii  I1 


0  110 
0  l  l  l 
0  112 
0  113 
Q  1  l  4 


txs l 0000 

3CL T  A  =  0  *  )  l 

CALL  3cSC(  «h  I  ,Z  J  .06  L’  A  .  \  u/  1  #Pf«Lc  .  Ik  > 
«P1T5<  3  «  l  16  I  Z  J.DSLT  i.ix,  i-rc  » 

1  t  O  PQ  KM  A  T  {  /  /  1  0  X  .  *  Z  J  =  'ir«,3i'  *  I  N?(  *  :  *  »  i 

♦  V6CTCHU  i  *  .  t  Q  •// 10A  ,  * OhjAn  [L  l  TV  l  T  C  ! 

£NO  CF  CALCULATION  of  escape 


»  OF  a,iul  j 


0  115 

1020 

CCNT INUF 

one 

A  l N (  JL  )  3 

0117 

1  0  *0 

CCnT  inue 

0  118 

1050 

CCNT INUE 

o  i  i  <; 

STOP 

0  120 

6N0 

JO  0  1 

c 

c 

C 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

0002 

0003: 

0004 

0005 

OOOfc 


G  0  0  7 
0008 
3  0  0  9 
00  t  0 
001  \ 
0012 
00  1  3 


00  l  4 
00  IS 
00  l  fc 
00  l  7 

go  l  a 

00  19 
0020 
00?  1 
0022 
002  J 
0024 
0C?5 
0026 
002  7 
0028 
0029 
0030 
00  3  1 
0  0  32 
0C3J 

00  J4 

0035 
00  Jo 
OC  37 


iU^'-LWT  i  i.f  '  f.  JT  ;  !  I 


this  routine  computes  the  s  utc  statistics  cf  an  n-^it  phcgrammahl£ 

COUNTER  SIMILAR  TO  THE  74163  GIVEN  The  INPUT  STATISTICS. 

R.L.ANO  PT  ARE  THE  RESET  «LC4J,AN0  COUNT  ENABLE  INPUT  STATISTICS. 

A  IS  the  ARRAY  CF  INPUT  PRESET  STATISTICS  LS8  FIRST. 

S  IS  AN  ARRAY  CONTAINING  THE  COMPUTED  STATE  STATISTICS. 

NO  IS  THE  NUMBER  OF  bits. 

N=2**NB  IS  An  INPUT. 

PC.  OC  ARE  aCRKING  arrays. 

RES l  IS  THE  STATISTIC  OF  THE  STATE  ZERO  ANC  IS  An  OUTPUT. 

01CCFP  IS  A  routine  that  GENERATES  The  binary  COEFFICIENTS  of  a 
GIVEN  DECIMAL  INTEGER. 

SASAN  ARCAUAN.  SUMMER •  1973. 


D  I  MO  NS  I  UN  A  (  NB  I  •  3  (  N  )  •  >JC  (  N  >  .  j0  (  i'.I  > 

REAL  U.KP 

ALFAX 1 ,0-( l . O-PT ) *U*H 
>3  £  T  A  —  R*PT  *L 
CA  >(MAsR»(  1  .  0  — L  1 

‘c  calculation  OF  PCCO 

JC  I  I  •»  1  ,.*J 

CALL  M ( CLCF ( I ,NM,hC) 

<P* l .0 
DO  2  <*l .N3 

2  <??(  (  l  .O-AIY.)  >  -1 .0*'2»O*AI  <■ )  )«"»'!!<'  ) 

°C l I ) sKP 
1  CONTI  NUF 

C  CALCULATION  C:  F  l  •  «  3  l  G«r*  ;>  I  o  (  •  I  ^  a  /-Lr  a  )  r  <  /  \  .  .»  v  I  ;  (  -» 0  r  a  /  a 

c 

SM 1=0.0 
SM3=o.O 

«>?  TAL=5FT  A/A  LFA 
"CA=1 . 0 
OG  10 

«0AaF04*2£TAL 
SMt =SMl ♦riU a 
Il8M-I*l 
-L  *  =1  • 0 
on  o j  v  =  i  . !  i 
25  |»L'=PLA*nFT4L 

SM  JsSM.I  l  1  )  * (  I  .  J-JLA  > 

1  )  CrNTlMUG 

S«1a«'l3/(  1.0-8ETAL* 

DU  50  J -  2  »N 
►AJ=l .0 
on  23  LL  =L  .  J 
23  “ A j=H A J#hFt 4L 
dm  I *0.0 

I r ( rtgT AL. £  J« 0 ) GO  TO  33 
JL  30  <~2,J 
fc*  l  -  J-<  «■  l 
fcCA  < *  l  • 0 


1-63 


i 


0038 

on  .n  «  - 1  i 

0  0  39 

3  1 

ni;A'.  =  3CAK  <  me  I  al 

00  4  0 

.  M'  '\K  =r>0  A  K/;«h  T  A  1. 

0  0  4  1 

i  o 

'v'-l  1  -  SMI  +  t‘l  >  4  K.  v  t  »C  (  K.  | 

0042 

32 

F,eb2=SMl  *G4MV4/.M.f  4 

0042 

£1  (  J  t  =H  A  j'vRF  S  1  f£S2 

0044 

bO 

CL  NT  I NU c 

004b 

S  (  1  )  =KE5 1 

0046 

huTUFN 

004  7 

UNO 

?nn  i 
C 

c 

c 

c 

c 

c 

c 

c 


00  0? 
000  3 
0  0  3* 

ooos 

0  0  C  6 
000  7 

aooe 

JJ0<5 

00  1  o 

00  l  i 
0012 
00  l  3 
GO  l  4 
00  l  $ 
00  i  t 


u  r  i  v  m  cur >  '  »'• 


This  ROUTINE  GENEW  4  T£S  the  •:  INAHY  CCEFPICIENTS  CF  A  CEC 1 MAL  INTEGER 
i •  i  :s  the  oect»-AL  integer  input. 

ec  ts  an  afsay  ccntmning  y  inary  coefficients!  *sb  first*. 

l=ec<  l  )*2*dCC2)*A«0Cl3)«-3»OC(4>  ♦••  •  •  2**  (  NS-  l  ) *bC  <  Nb  )  • 

•  •••«••«*•••«•••**•••••«*•»«•* *^»  *•**•**•«•**•■**«•■• «****•*«*«**«** 

3  I  MENS  ir*.  -’C  (  u 

via  1  -  I 
VS|,J 

CO  10  <  =  !  •  Nb 
\  J  K  -N  *  C.  J 

3T  ?0  Cl  .‘10 
NSN/2 • 0 

lMM.Lr«N)GC  TC  1 
CC (  K  )* t  •  0 

MSM-M 

GC  20 

1  «C (  < ) =0 .0 
20  CONTINUE 
FETUPN 
5  NO 
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000  l 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

0002 
C  0  03 

000  A 

0005 

oooe 
ooo  r 
0008 
0009 
00  l  0 
00  l  l 
00  12 
0013 
00  1  4 
oc  15 

co  i  e 

0017 

ooie 

00  19 
C  0  2  0 
002  1 
0022 
0023 

002  4 

0  025 
0  0  2  C 
002  7 

ooze 

0  C  2  9 


•.  u  '  1  Nt  ’E  SC  t  .  '•  ’  '  >  .  ,  •  *  ,  *  v  i 


TMg  FOLLOWING  SUefiCUTlNE  CALCULATES  Tn£  PRO *e l L  l  T  Y  uF  ESCAPE# 
PHI  IS  AN  ARRAY  A I TH  N  ELEMENTS  CONTAINING  THE  FAULT  OENSITV 
FUNCT  f CN# 

ZJ  IS  THE  FAULT-FREE  OUTPUT  STATISTIC. 

IX  IS  THE  test  length, 
delta  IS  THE  TEST  STRINGENCY. 

PROS  IS  THE  ESCAPE  PROD A0 I L I TY . 

SASAN  arc ALAN  •  SPRING  197* 


0  IMENSICN  PHI  (  t  ) 

MsN+l 
Z INC = 1 • 0/N 
PRORsO.O 
I  <s  IX«<  2 J-JEUTA ) 

C<sl K*(  2  J +  9EL  T  A ) 

TPX  =  2.042.1  4  1  :>92l>»I  X 

IF(  (  I<  .L  T  .0  )  .OP  .  (  LN.  u  T  .  r  X  )  )H£Tuf  N 
CO  30  1=IK,L.< 

P’<=I 

P'iUMaO.  O 
C'J  35  <  =2  •  N 

IF( »MI ( K ) • EO. 0. 0 ) GO  T  ( .  15 

FKsK-l 

FN=N 

ZZsFK/FN 
ZZM-=ZZ*(  l  .0-22} 

TWsTPX*22m 

TEx  =  (RK-Ix*22) *(R<- I  X  *  Z  Z )  /  2  • J /  Ix/Z2v 
I F( TEX.G7  .1 00 .0 )G0  TC  35 
T  E  X  =—  T  £  X 

TEXrEXPM  TEXJ/SOWT(TP) 

PSwMsPSUMAPH l  (  K)  a  T  E  x 
35  CONTINUE 

3kChs'1CC?*i3SUM*ZInC 
30  CONTINUE 
RETURN 
F-NO 


PCCGG4*  NA*t  CNTRSlM 


c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

000  l 
0  C  0  2 
0003 
G  J  0<* 
C  JOF 
OOOfc 
0007 


oooa 

0009 
OC  1  0 

oc  i  i 

OC  l  2 
00  \  3 
30  14 
00  i  3 
00  1  t 
CO  i  7 
00  I  6 
00  1  9 
00  20 
00?  I 


0022 
OC  22 


THIS  PROGRAM  SIMULATES  an  ft— iXT  PRC G3AMM&PLE  CCUN7ER  SIMILAR  TO  THE 
74103.  THE  INPUTS  7C  Tf5  P^CGRAM  ARE  AS  PCLLOSi 

caro»i :  input  statistics  nr<«  cf  bits) ,r< reset) .liloaoi .pt< count  en¬ 
able)  format  12.F8.5.2F10.7 

ca9c*2:  parallel  loao  input  statistics  contained  in  array  a.  use 

ENTERED  FIRST.  FORMAT  3F10.7 

CAfiO*3:  TEST  LENGTH (  NUMBER  CF  SIMULAT ions ) .NS IM.  FCWMAT  110 
CARC*a:  stringency  * INCC*.06LTa.  format  Flo. 7  * 

CARO  *5  5  FAULT  CC NF I  GUP A T I C N  FOR  PINS  R.L.PT.LSP . MSB. 

•2*  FAULT  free.  M*  STuCK-AT-ONE  .  'O*  S  TUCK-AT-2ERQ .  FQR.MAT  3011. 


PROGRAM  TERMINATES  if  5  DETECTED  IN  FIRST  column. 

OUTPUT  CONSISTS  OF  RESULT  OF  TESTl  OASS/FAlL).  S I MUL  AT  6  C  AVERAGES. 
FAULT  FREE  STATISTIC  FC R  EACH  STATE. 

cnstat:  routine  that  computes  state  statistics  given  input  statistic 
cntrs:  ROUTINE  That  SIMULATES  COUNTER  GIVEN  input  STATISTICS  and 
NUM0ER  CF  SIMULATIONS*  OUTPUTS  SIMULATED  STATE  AVERAGES. 

siccff:  routine  requirec  av  cnstat. 
ranc:  routine  required  ev  cntrs. 

SASAN  ARQALAN*  SUMMER.  197S* 


DIMENSION  a  l  250  »S(  ?S<i>  •  IA14>.1A2WM  ) 

0  I MENSICN  T (  i 6  »  .0( 1 u  ) 

dimension  pc(io).bc(8i 
integer  nib) 

?r£\L  L 

0AT4  IAS/07TJS.  %  'i3  t  9  .  9  0-  -  ..  *3  7  •  -  .  Z  ?*  ?s  .  2  ,  /  •*  J 

CAT  A  Fpccrr/Q  #2^973  c"3  )  J9,  1  2  *J  2  ;  .  J  .  J  »  ...  ,  )  .  j  3  *  .M  «.  ,  .j  ,  i‘i  i  J 

30.05.0.03  9b  .0.0  2o  9  9  *0*02  2  3.0.  3  13  5.  J  *  "21  ■>«  ,  u.  0U93*  ,  0  . 
$0.0055. C.C043/ 

A  E  A  C  (  |  ,301  JNB,L,l.«3T 
3 5 ac ( I  ,30  2 ) ( A( <  I  ,<= t  *  No  I 

300  FORMAT C  l  10  J 

301  FORMAT  (  U’  fF9*5. 2FI  J.  7) 

302  FORMAT { HFl 0*7) 

*nm  3,2205 

370  FCR’iaT(//iOa,,NP*R,L.PTj  •//) 

*R I  T  EC  J  .  JO  1  )N0.R.L.PT 
*  RITE  13  .  32*>) 

J2?  FLRmaT ( // i OX . •  a ,j , c ,.,••.// ) 

V»F  I  TEC  J  .  3  02)  (  A I  K)  ,k=i  ,N<*  I 

N=  1 

on  19  J J= i » N8 
19  n*n*2 
C 

C  CC-MPUTfe  FAULT  FR  at  STATISTICS. 

c 

Call  UNSEAT  (R.L.  PT  »  F  r  i<  E  5  .  «  PC  »  -  I  ,  A' 3  1  .  •'<  .  .'J  I 

Till sP 
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■<  M  -L 
t( JlsPT 

or.  -j?o  <k si  .  v* 

7  t  3  ♦«<  |  =a  (  ;*  ) 

Cc:n7  i.\ur. 

NP=Nt«*.3 

P*  AC  (  l  ,300  I  NSIM 
SeAC( 1 ,330J0ELTA 
*PItf(3.3J0)NS  I  '*  .  OEL  7  a 

FC'?MAT<  IHI  »IOX  »•  NUMPEk  UP  >  I  '**  jL  a  M  JK';  I  #  .  I  1 
CON T  INUF 
*P  I  TF(  3 • J  30  > 

FC°MAT  C//21  30(  •  ■***>./)/) 

RE  AO  (  l  •  3c0  MMKI  .K*  l  *  NP  ) 

P(  l  )  a  GT  •  2  )  STOP 
POKMA  riFlO.7} 

FC^MAT ( 60  I  !  ) 

00  300  M  I  =  l  ,NP 
A P=F (41) 

IF(T(MI)  • Nc  •  0  •  0 )  GU  TO  ±9° 

°  ( *U  >  *  U  •  0 

I  F  (  M  *  t  )  •  E3  •  l  >  (i  (  II  |5i,j 

G(  -  7 r*  500 

a('^l)s4P/?,0*Ui0MP-?*  n  "  (  T  (  1  !  )  -•>  «  .M  /  ’  (  M 
continue 

00  SOI  v(=l,Nfl 
A  (  4  I  )  a0  (  3  I  ) 

P=3( 1 ) 

L=9  (  0 ) 

PTsQ ( 3  ) 

SIMULATE  FAULTY  CONFiauPATfuN. 

CALL  CNTBS(«.L.PTtA  a  S.N-»  •  IA  .  1  AJ  ,  <3  1  ’M 
NS=l 

00  49  1*1 aM0 
NS*NS  *Z 
00  SO  1*1 .NS 
00  50  1*1 . J 

PSPFQWM  TEST  ON  3  l  •■4UL  A  T  -  J  4  ’/C  PA  Cci  S  . 

ZL=F^FE(  I  )  —  0  EL  T  A 
7HSFFS55 (  r  )  +0  EL  T  A 

!  F  (  (S(  I  )  •  GE  •  Z  L  )  •  A  NO  •  (  s  ;  [  )  •  L  C  •  L  • )  >  v  l 

"'‘MNT  T£3r  RESULTS  F<.c  •“  -  O'  jN':, 


’(•Mm  MM 


mS!TE(J*3T0)(F(K)  .  <  =  t  .\p  ) 

37J  FCR '1AT  (  /  l  OX  .  'FAULTY  C'JNF  t  iU*A  M  TN 
CC  TC  50 

51  T£<3  .372 >  ( F( X)  .<*1  .NP  » 

M?  FORMAT  ( /I  OX  •  •  FAULTY  CONF  r  *-T  ;c  \ 

<«PiTFn,.v5)  l.5(  i  )  ,rro£Ei  i  > 

3^5  CCPMA r ( /! ox . • ST A r*  01AT:  : 

7  •Fl0*7,//3JX,70(  •  )/) 

GOTO  03 


’ll,*  M  !  LE'J  t  *- E  test 


HM*** 


0001  './MM  .  ‘  x  * 

c  <  M  M  M*M  •  M*t  *  t  ««  ««•>««**  « 

c  * 

C  «  THIS  ROUTINE  GENERATES  a  QANOCM  ONE  with  FCC3AeiLlTY  P. 
C  *  J  IS  the  RANCQM  cne  OUTPUT. 

c  • 


0002 

CALL  KANCUf  l  X  ,  [  r 

0003 

jsl 

0004 

!F( yFL.GT »P ) 

0005 

I  X=  I  Y 

0  0  C  6 

RETURN 

0007 

5  NO 

1-69 


000  l 

c 

4  * 

c 

c 

* 

* 

THI  S 

ROUTINE  SIMULATES  AN  r-OIT  PRGCWAMMAcLe  CCLNTEW  SIMILAR 

TO  THE 

c 

• 

74  1*3 

•  W.LtPT  ARE  THE  F £ SET  *LGAO  •  A NO  CCUNT  ENA5LE  INPUT  STATISTICS* 

c 

* 

A  I  S 

THE  ARRAY  CONTAINING  THE  PRESET  INPUT  STATISTICS  L Se  FIRST* 

c 

* 

N6  I  S 

THE  NU.V8EP  OP  3 1 1  S !  PRESET  INPUTS]. 

c 

• 

S  IS 

THE  ARRAY  CP  SIMULATED  STATE  AVERAGES* 

c 

* 

IAS  IS  AN  ARRAY  CC  N  T  A  I N I NG  NR  HANOO«  INTEGERS! 3— 5  DIGITS  )  • 

c 

0 

IA  IS 

A  MORNING  ARRAY* 

c 

m 

NS  l* 

IS  THE  NUMeER  CF  SIMULATIONS* 

c 

m 

HAND 

IS  A  ROUTINE  THAT  GENERATES  A  RANCCM  CnE  n I TH  SPECIFIED 

PRC3- 

c 

c 

• 

• 

ABILITY.  SASAN  ABOALAN.  SU’AMEB  .  !?78. 

c 

0002 

•  * 

Dl  'At:  NS ILN  A (  l  )  . SI  l  )  .  1  A  I  i  )  . I 1: (  11 

00  0  2 

peal  l 

00  0  4 

DATA  IXR.IXL.tXPT/3H3?').\'o<»7'!.(.  1  1  11/ 

CC05 

N  =  l 

oooe 

no  3  !  a  l  •  NQ 

0  00  7 

5  N  -N  * 2 

GC  OH 

30  IS  Jal . N 

0  0  00 

15  i  (  J  l  =  0  •  0 

00  l  0 

J  =  l 

00  l  l 

nn  :* s  <«si  ,n31  m 

c 

OtNeRAT;  1J4NCC.Y  Inputs 

ooi  a 

CAUL  R ano ( R ,  I B .  IXB ) 

00  l  3 

Call  RANlHL  iILi  UL) 

00  t  4 

CALL  RANO( PT , IPT . [ XP r ) 

00  1  5 

CO  12  *  =  1  .NR 

coie 

S  A  *  A  (  K  ) 

00  1  7 

IXAs  l AS (  <  ) 

00  l  9 

CALL  .1ANLI  SA  .  IAS.  IXA  1 

oc  i  * 

r  A  (  K  )  =  I  •.  r, 

C020 

I  AS (  <  )  a  I  XA 

0C2  l 

12  CONTINUE 

0022 

I*<  in*  EG*  ?)  CCTO  1 

0023 

I  F (  tL.cQ .0 1  GOTO  2 

0024 

!F(  IPT  *£0*0 JGCTQ  oQ 

0  0  2  5 

J  =  J*  1 

002* 

IH  C  J*cC.N*l  )  J  =  l 

0  C  2  7 

GliT0  50 

CO?  ° 

l  J  -  l 

ct#29 

^OTC  50 

OO  J  0 

2  ISUm=0 

00  3  1 

X  6=  1  •  0 

0032 

03  20  Ksl ,Nfl 

0033 

I  SUMs<c*  l  A  (  N  5 •<  *  l  )  +  I  «jU  A 

0074 

X  E  a  <  E  *  2 

0035 

20  CON  T I MUF 

00 

J*  l  SUM* i 

000? 

50  S(  J)sS(  JIM  .0 

00  1“ 

53  CONTINUE 

00  39 

CO  2  5  J  =  t  .'J 
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0040 


00  4  1 
0042 
C  0  4  3 
0044 


25  S  (  I)  =  5(  J  )  AMS  ri 
C  ^ITE(  J..VSI 

C  v  iv  I  T  C  (  3 , 1  J  o  >  (  i  (  J  )  .  J  =  1  ,  m  ) 

3;’S  F  'JNMA1  (  lh  1  ,//  ,1  OX  ,  •  S  I  -AJL-*:  u  )  •-■.'.LI 

l>0  rC'CM/'T(//l  )X,E14,n 
RETURN 
END 


EXAMPLE  DATA  FOR  CNTRSIM 


//G.SYSIN  CO  * 
4  0.9  0.4 

0.9  0.3 


1  COCO 

0.0  1 
2222222 
1222222 
2022222 
2220222 
2202222 
2222202 
2222220 
2  1  22222 
22  12222 
2221222 
2222  1  22 
2222212 
2  2  2  2  2  2  1 
1212222 
1012222 
2  C  2  0  0  02 
222000 1 
022222 
222022 

1000 

4  .9  0.4 

0.1  0.3 

0.01 


1 OOOOUO 
4  .0  0.4 

0. I  0.3 


/* 


0.9 

0.3  0  •  S 


0.  9 

0.3  0.5 


0.9 

0.3  0.5 
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c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

0001 
0002 
00  03 
0004 
OOCS 
0006 
0007 
000*= 
0  009 
00  l  0 
00  l  l 
00  1  2 
00  1  3 
00  1  4 
00  l  5 


00  1 1 
5C  1  7 

co  i  a 

0019 
0020 
002  L 
0022 
0023 
0024 
0  0  2  S 
0  C  2  6 


PRCGRav  name  SHIFTS!** 


THIS  PROGRAM  SIMULATES  TH£  STATISTICAL  TESTING  CF  A  T*C  BIT  PARALLEL 
LCAQ.  SHIFT  RIGHT,  SHIFT  REGISTER*  INPUTS  TC  Th6  PROGRAM  AR  £  J 
CAPCFt:  INPUT  STATISTICS  S  *  M  *  A  *  3  FORMAT  8F l 0#  7 
CAPC*2:  NUMBER  OF  s I MULAT I CNS(  TEST  LENGTH)  FCPMAT  I  10 
CARDO:  STRINGENCY  atNOCW  FORMAT  FIQ.7 

CARCA4J  fault  CCNF I GUR AT ICN  FOR  PINS  S.M.A.e.  THE  CONFIGURATION  IS 
SPECIFIED  BY  *2*  FAULT  FREE#  • 1  *  STUCK  — AT  — ONE*  »0*  STUCK- AT- ZERO • 

THE  FORMAT  IS  80IS,  EACH  FAULT  CONFIGURATION  IS  SPECIFIED  CN  A 

separate  C AP C« 

THE  PROGRAM  TERMINATES  »H£N  A  5  IS  PUNCHED  IN  COLUMN  l. 

PRINTOUT  IS  CONSISTED  CF  *  HE  T  HER  THE  CIRCUIT  PASSES  OR  FAILS  THE 
TEST#  THE  FAULT  CONFIGURATION#  THE  FAULT  FREE  STATISTIC.  AND  THE 
SIMULATED  AVERAGE. 

SHIFTS:  SUBROUTINE  THAT  SIMULATES  SHIFT  REGISTER 

SHIFT:  SUBROUTINE  That  COMPUTES  STATE  RWCBAeiLlTES  gf  Shift  reg. 

CTHER  ROUTINE  REQUIRED  RAnO. 

NPaNUMBER  OF  PINS 

HQ*  NUMBER  CF  NITS 

CEL  T  As  TEST  STRINGENCY  wlN0Ow« 

F I K )  ;  ARRAY  CONTAINING  FAULT  CONFIGURATION. 

T { K  )  :  ARRAY  CONTAINING  INPUT  STATISTICS. 


DIMENSION  4)  »PTM  GOOD  \ 

DIMENSION  T  (4)  .SI4*!  •FFRFEI-*  I 
DIMENSION  3(4) 

INTEGER  SSI  4. 2)  ,f( 4) 

NP  =  4 
Nfl  -  2 

READ! V  .30?  )  ( T (  I  >  .  1*1  .4  ) 

JO?  FORMAT! tiF I  0. 7  ) 

RE  AC (  1  #  3  00  >  NS  IM 
300  rcRMAT(I10> 

~ 6  AO  (  l  •  350-)0ELT4 

w«  l  re  (  3 . 3  l  0  )NS  I  M  .DEL  TA 

310  FORMAT  l  IHI  •  XOX  •  *  NUMBfcP  ^  5  I  V'JL  A  T  t  i  INS  I  *  »  I  l  J  »  '  *lNUj*:*.Fl 
w«ITE(3i333  MT(  I  )  •  I  -  l  .  •*  ) 

333  FORMAT  (  //I  OX  .  *  t  nP'JT  3UCJ a  £  I  L  I  r  Y  /CCTJP  S  *  m  .  a  .  •  •  / /  l  J  a  ,  -  (  *  I  ; 

C  SIMULATE  FAULT  FREE  CIRCUIT, 

c 

CALL  SHIFTS!  T#  3  .NSI  m,S3  t**5^.PT  ) 

CALL  3HIFT(  PP .FFROE  > 

05  CONTINUE 

wRI T  £ ( 3 • 330  ) 

330  FORMAT (//2(30< •  **•!/)/) 

-6  AD(  !  •  J  C  0  )  (  F  (<  )  .  K  =  I  ,  .MM 

ip( F( i ) *gt.2 )sthp 

350  rc«MAT( F 10. 7 ) 
jou  fcrmmt ( a o t i i 

DO  jOO  M  I  Si  ,,NP 

ACsF I  MI  ) 
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JO  2  7 

1  »■  (  r  ( -i  I  )  ,;j*;  .  o  ♦  ;  )  (it  • :  ■*  .  . 

0036 

) SJ *0 

0029 

1  f  {  f  (Ml  1  «  C  *3  •  l  ) 1 1  l  m  I  »  =  l  •  ) 

0030 

jC*TO  ^0  0 

00  3  1 

4  0<> 

r  (  M  !  »S4P/;,.1*(  |  .  O  ♦  (  ( ;  -  -»  .  y  )  *  <  t  1  •  »  |  1  /  7  <  [  )  1  ®  T  (Ml  1 

0  0  3  2 

50J 

ccn  r  i.muc 

0033 

SP-ltLATc  FAULT V  CONFIGURATION. 

003a 

C 

C  ALL  CH  I  FT  s  (  a  .  S  .  NS  l  ”  ,  S5  .  Pi*  .  3  T  > 

0035 

s  3  =  l 

0036 

CO  49  I  =  Z  .Nfl 

0037 

49 

NS=NS*2 

0038 

CO  50  (*1 .NS 

c 

/"■ 

CHECK  IF  SIMULATED  OUTPUT  *  (  f  H I  M  T-;5r  *IN0<:«  Lr  F-Ull  r  Ki_*l 

Q  0  39 

V. 

ZL-FFPEE ( I )-OELT A 

0040 

JHsFFPcS  l  I  )  06LTA 

004  l 

I  F(  (  3(  I  >  •GE.2L)  •  AND  •  (5(1)  »L“..  /)'  )  Km’T£  51 

c 

POINT  TE3T  RESULT?  Pf,R  EACH  -,T;T  . 

0042 

c 

-RITE(3.37J|(F(K).ksI,4P) 

0043 

J  70 

FC*MAT<  /  10X  .  ’FAULTY  CCNF  I  VJU  A  T  I  C'J  '  ,4fl  ,•  failFS  T  ^E  T£ST 

0014 

GO  T  C  50 

0045 

51 

«PITE(  J«J72)  <F(<>  ,K.s|  .NR) 

0  046 

372 

FORMAT!  /  l  JX  .  •  PAUL  TY  CCNF  IGUHAT  ION  «  .*  1  1  ♦  *  PASSED  Tr r£  7  ES" 

0047 

50 

*PI  T£(J.375  )  l  .  5C  I)  .FF-?S*-(  l  ) 

004? 

3  75 

FCPMATl  /tnx  ••  STATE  »Mo,'  iTiTc  PPI.S,  •  .F  10.7,  •  F^uil  »:<£■£ 

3  •  F  l  0  «  7 .//SOX  t  70(  )/) 

CC49 

*Pl TI ( 3 .363 ) 

00  50 

6  98 

F'3«  MA  T  (  /  /  10  X  .  •  l  NP<  i  T  ‘<F  A  'J  LP  E  t  ?  •  M  .  A  .  v‘  )  :  •  .  4  (  f  '  .  *  ,  3  *  >  ) 

005  l 

GGTC  95 

00  52 

«  TUP 

0053 


cNP 


i 
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I**  •  '  r  J  T  1  V 


r  i .  i  r  7  /*>  i 


•**7  ) 


000  l 

c 
c 

c  *  THIS  RUUTlNE  SIMULATES  A  2-*‘IT  P  AR  ALL  EL -LC  A  0  .  R  IOHT  -  SHIFT  .SHIFT 
C  *  REGISTER,  PV  IS  TH£  ARRAY  r.  CNTAlNlNG  INPUT  STATISTICS  S.M.A,  ANQ  9, 
C  *  SIS  AN  ARRAY  CCNTAINInG  THE  RESULTANT  SIMULATED  AVERAGES  FCR  EACH 
C  *  STATE,  NS! M  is  THE  NUMBER  CF  SIMULATIONS. 

C  *  SS  IS  A  TWO  DIMENSIONAL  FORKING  ARRAY, 

C  *  SUBROUTINE  RANO  GENERATES  A  RANDOM  ONE  *ITh  SPECIFIED  PRC8A8ILITY. 

C  •  SASAN  arqalan  SUMMER,  \9?b. 

C  A 

c  •******»««**«*•««*•**»********•*««*** ********•*«***«*»*«**»..*****.*,*», 

00  0  2  01  MENS ICN  ov C  A »  »S< A  ) 

oooj  integer  sri(4 ,£)  ,ps,sm ,a  • » ,  ti 

0004  data  cm  .  IS  .  l  A  ,  ta/3b32’».  *0  371  ,H  l  1 1  .  7e?2v/ 

0005  SSI  1.1)51 

000 t  SSI  2*1)54 

000  7  SS (3.1) =4 

0006  SSI  2 .2 )-3 

00 OR  SSI  l  . 2  >52 

0 0 1 0  SSI  4,1  )  —  l 


00  I  l 
0012 
00  1  2 
OC  !  A 

00  1  s 
00  1 1 
001  T 

oo  i  a 

3019 
0020 
002  1 
0022 
0020 
0024 

0025 
0  02  r: 
0027 


Call  R am;  (pm ,  m • Im ) 
CALL  RANDI RS. SR. I  5) 
CALL  RAND (RA  ,  A  .  I  A ) 
CALL  RAND  CRB .3.  tO  ) 
IF ( M«  £Q, 3 ) GGT  Q  10 
PS  =  i+8*2*  l 
If=<PS«E0.3)PS5* 

I/<  I  A#g  >,E0#  l  )  PS  53 
SIPS )5SIPS) >1,3 
sere  35 

10  PSsSSI PS  .SR* 1) 

s(ps)ssips) *1  ,a 
55  CONTINUE 

DC  14  1=1.4 

14  bl  ;  )  =si  I  J/NSIM 

return 

SNO 
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OCOi  Joii.iCuMNr  liii':u:  ;i 

c  » 

c  *  this  subroutine  COMPUTES  The  STATE  PRCRAEIlT ies  OF  A  2-EIT  PARALUEL- 
C  *  UCAO.  right-shift,  shift  register. 

C  *  a  IS  THE  ARRAY  CF  COMPUTED  STATE  STATISTICS. 

C  • 

c  »***••*•*****«*•*»*«»«»•*»**•*««**«««•««««»«»•**«•«*««««»*»•«««*••*«*»« 


0002 

; :  MCNSic.N  t (  n p )  ,o ( ^  ) 

0002 

mcAL.  M,MC 

0004 

S  =  T (  1  ) 

00  0  5 

M  =  T  (  2  } 

jooe 

4  =  T (  3  ) 

0007 

^=1(4) 

jooe 

AC=  1 .0-A 

0009 

BC= 1 .0-8 

00  1  0 

r  C  =  l  •  0  -  S 

00  11 

MC* 1 .0-4 

CO  1  2 

0  (  1  )  =SC  *  MC-  S*  SC  *  MC  *  M  C  -  S  0  «  *  •’  •  '*  C  *  rC  *•  ~  C.  »  * 

00  l  3 

Ct  2  )  =  S*MC-3*S*mc*MC-  5**  v»C«-,4r  ’  **•*• 

00  l  * 

C(3>=S*$*  'C  *  MC  f  A  *  3  «-»C  *m  *■  i*  a 

00  1  5 

C<4)SMC*MC*S«SC*’'<'C**4«3C.*A+i'‘}tAC:**<* 

UO  1  t 

P iTuPN 

00  1  7 

PNiO 

EXAMPLE  DATA:  SHIFTSIM 


/✓g.Sysin  oo  * 

0.6  0.9 

i  coao 

c .  o  i 
2222 
2  122 

1  222 
22  12 
2221 
0222 
2022 

2  2  0  2 
2220 
2  1  C2 
2  10  1 
0  2  01 
2111 
2  i  12 

555S 

/» 


3.7  0.7 
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f  r.  *  0  c  ^ 


*  THIS  PUuuRAM  C’.iMPUTiIS  T  Ml;  *.  ,.M)!i:-iI  _  j  _  ^ I  _  [  •  iT.  -u  -  «A  • 

*  P4UUT  PKGH^gtLlTY  GiX). 

*  NP  IS  T  Hcl  NUMr3sIF  Cl-  INPUT  y[Nj  JF  1  HE  p  AC  <  *  ^  z.  (  C  *  ->C  U  I  T  l  • 


i««*. «****.*»«*  *  C  •  *•»«»«  r.  ««*«**’1 


EXTERNAL  FCT •CQMU 

CC-MMCN  np 

I cN  0  =  50  O 

£PS=l .06-A 

XL  1=0.0 

XRI =1 .0 

00  GO  NPsl.au 


im 


RTvjl  CAN  PE  FOUNO  IN  TmF  Ia«  SCIENTIFIC  5Ut‘H<iUT  I  n£  ->\C<4G=. 

CALL  RTMl(x.F.FCT.XL  l  •  XR  t  .EPS.  IE.NO.  I  gu  I 
*Rl TEC  3. 100  >X  .F  .XL  I  .XPt  .EPS. I ENO . t  ‘-.R 
100  c  CRM  AT  (  •  •  .  I  OX  •  •  X,  F  ,  XL  I  .  N  f  .E-»S  .  I  £N  >  .  i  C'-  *  //S  (  Sx  .  F  ;  '4  .  7  )  /  /  i  j,  , 

XX=2 .0/ X 

alphasalcgi  XX) 

«R I T= { 3.250 ) ALPHA .MP 

2  50  FORMAT  (//  1  OX  «•*  *%*  al3h*  *  *  *  *  4  .  E  l  -*  •  7  .  *  *•»*  •/  -MN3  *  - 

S  I  3  ) 

20  continue 

STOP 

ENO 

FUNCTION  FCT(XI 
eXTfCh^L  COMB 
CL^MCN  NP 

f»jm-=o.  0 

X  K  s  |  «  o 

00-10  t  =  l.NP 
X  K  =  X  K  ft  X 

S*JM  =  SUM#.CCM0(  NP  .  I  )  *XK 

40  continue 

FCT -5 SUM-  l  ,0 
C  F  T . j  p  N 
ENO 


e  UNCTION  ccmo  (  n  .  .<  ) 

I  r ( K.EO. I  )CCMH=N 

IF  (k.  ,cC.N  »COMO=  t  .  0 

I  F (  <  K  .EC. 1  I.CR.  IK.EO.M  )  ^CTUP 

X  =  l  .  0 

Nf/KsN-K 

00  2  0  r  = 1  . N 

X  =  x  *  I 

I  F (  1  • EQ . x ) XK  =  X 
Ip(  l  .£0  .N  *AK  )  XNMKsx 
20  CUNT  iNUf 

C CMH  =  X/X  </X  N.v*K 
RETURN 
S  NQ 
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•Preceding  page  blamunot  filmed 


/  ✓  •  F  *  :  >  A  X  A  A 

//  exec  ftgcg 

//C.SYSIN  co  * 

C  PRQGCA^  NAME  PUGTCM 

C  ***♦•♦♦♦***♦•***********•♦•**♦* *^ *****»***.•**«**«•*.*«**. .***«•«•***«• 

c  •  • 

C  •  1HIS  PROGRAM  PLOTS  the  state  PROBABILITY  CF  A  CCUNTcR  VERSUS  THE  * 

C  *  VARIATION  OF  T*0  QF  US  INPUT  STATISTICS  *HILE  T  H£  CTHER  STATISTICS  • 

C  *  REMAIN  FtXEC.  • 

C  *  CNSTAT  (S  a  SOUTINE  THAT  RELATES  STATE  STATISTICS  TC  INPUT  STATISTICS 
C  •  R.U.PT  ARE  THE  RESET,  LCAC.AnO  COUNT  ENABLE  STATISTICS  CF  THE  COUNTER. 
C  *  A  IS  an  ARRAY  CONTAINING  THE  PRESET  INPUT  STATISTICS,  • 

c  »  pikij.i)  is  an  array  containing  the  z  coordinate  corresponding  to  * 

c  *  X( 4 )  »  AND  Y (  I  )  .  « 

c  *  npx  is  the  NUMBER  of  POINTS  ON  the  X  AXIS.  * 

C  *  NP Y  is  The  NUMBER  CF  POINTS  GN  The  y  AXIS.  * 

C  •  RMIN  AND  RMAX  ARE  THE  MIN.  ANO  MAX.  VALUES  Cc  P(K(J.U  THAT  IS,  2*  * 

C  *  FCViS  COORESPONO  TO  THE  X  AXIS  ANO  COLUMNS  TO  THE  Y  AXIS.  * 

C  *  CPI  IS  THE  NUMBER  OF  CCLUMNS/INCH  ANO  RP I  THE  NUMBER  OF  ROwS/lNCH.  * 

C  *  UNIT  3  IS  THE  OISC  WHERE  PIKIJ.I)  IS  STORED  FRCM  *h!CH  THE  PROGRAM  * 

C  •  SYWVU  OBTAINS  THE  PLOT  INFORMATION.  * 

C  •  * 

C  M  «MM*t*M*****M<MMMM«******M««***«*.M#***M.*.****,*?M.*.««.* 

DIMENSION  P  IKI5Q  ,50  I  ,A( 2So 1  ,PC( 2S6 I , EC( 16 ). S( 2S6 I 
REAL  L 

RE  AC ( l  ,  1  !0 ) NO 

RE AO  <1  .  120  > ( M  <>  ,K*| ,N0) 

RE  AC (1,1 30 ) R  «L  ,  PT 
110  FCRMATII2) 

120  FORMAT (  1  EPS. 3) 

130  FORMAT ( 3F5. 3 ) 

N  —  1 

CO  *  1=1 ,NB 
5  NsN*2 

RFAC< I .240INPX.NPY 
240  FC  Rm  a T ( 2  t  3  I 
OXsl.O/NRX 
0Y= 1  .O/NPY 
NPX l SNPX* l 
Spy  l  =NPY+ I 
CO  500  I  3 1  .NPX I 
RT  * (  l-l  >  *0X 
CO  500  J  = l  ,NPY  t 
L=< J-l ) *0Y 

CALL  CNSTAT(R,L.PT,S.N8,PC.eC.RESl • A , N ) 

PIK I  l , j  )=$( 2  ) 

500  CONTINUE 
nC=nPY  1 
NR  SNPX 1 
CPI *2, 0 
CP  1  =  2.0 
RM  IN*0 .0 
RM  AX-aO  •  6 

IT6(0»N«.NC. RFI, CPI. RMIN. fiMAX 
CC  44  JS l • NR 

44  *RXTE( g)(PlK(J,I ) ,1=1 ,NC) 

RE  *  I  NO  a 
CALL  EXIT 
5  NO 
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ARDALAN,  SASAN  HOUSTON.  Statistical  Fault  Monitoring  of 
Sequential  Circuits.  (Under  the  direction  of  JAMES  W.  GAULT.) 

The  effectiveness  of  statistical  fault  monitoring  of 
digital  sequential  circuits  as  an  on-line  built-in-test 
technique  was  investigated.  In  applying  this  technique  it 
is  important  to  be  able  to  evaluate  both  the  probability  of 
escape  and  the  probability  of  false  alarm.  The  probability 
of  false  alarm  has  been  shown  to  be  a  very  straightforward 
function  of  the  experiment  length  and  test  stringency. 

The  probability  of  escape,  however,  depends  on  the  network 
fault  density  function.  To  derive  this  function,  a 
statistical  fault  model  was  investigated.  Also,  necessary 
for  the  derivation  of  this  function  were  efficient  methods 
for  obtaining  output  statistics  of  sequential  circuits  as 
a  function  of  input  statistics.  Various  methods  were 
examined  and  reported  for  deriving  output  statistics  from 
the  state  diagram,  regular  expression  description,  and 
directly  from  the  circuit  implementation  of  sequential 
circuits.  '  Based  on  these  methods  and  the  fault  model 
considered  an  algorithm  was  found  for  the  computation  of  the 
network  fault  density  function.  Using  this  function  the 
escape  probability  for  various  input  statistics  and  test 
specifications  was  derived  and  the  results  were  confirmed 
by  computer  simulations.  Test  conditions  were  found  where 
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the  fault  detection  of  sample  sequential  circuits  was 
extremely  effective. 

Appendices  include  computer  listings  of  the  algorithm 
and  simulation  programs.  A  method  for  three-dimensional 
plotting  is  also  included. 
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1  INTRODUCTION 


1 . 1  Motivation 

Digital  electronic  equipment  is  being  widely  used  in 
varied  environments  in  the  military  and  industry.  Thus 
digital  equipment  is  used  in  critical  control  and  computa¬ 
tion  applications  where  proper  fault-free  operation  of  the 
equipment  is  essential.  Moreover,  most  systems  utilize 
modular  digital  circuits  in  the  construction  of  their 
equipment.  This  has  the  advantage  of  having  a  structure 
for  the  equipment  and  thus  providing  for  ease  of 
maintenance  and  repair. 

Thus,  the  on-line  monitoring  of  faults  while  the 
digital  equipment  is  operating  is  a  basic  requirement  in 
large  complex  modular  systems.  Moreover,  since  the  trend 
is  toward  modular  digital  equipment,  the  idea  of  built-in 
test  has  emerged  where  each  module  has  a  built-in  circuit 
that  monitors  the  module  for  faults.  It  is  the  purpose  of 
this  study  to  investigate  a  standard  built-in-nest  strategy 
suitable  for  monitoring  faults  in  a  broad  range  of  modules 
[1]  . 

1 . 2  Test  Assumptions  and  Standard  Bit  Strategy 
This  section  provides  an  outline  for  the  test  assump¬ 
tions  and  test  strategy  used  for  testing  on-line  digital 
circuits.  The  basic  test  assumptions  are  [5]: 

•  The  testing  objective  is  detection  of  faults  in 
modular  digital  sequential  electronic  equipment  which 
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has  been  fielded,  -i.e..,  has  passed  design  and  manu¬ 
facturing  acceptance  tests.  The  3uilt-In  Test  (BIT) 


circuit  will  monitor  on-line  operations  of  a  digital 
sequential  module  and  will  not  alter  normal  processing 

•  The  testing  objective  is  to  detect  multiple  as 
well  as  single  logic  faults. 

•  The  behavior  of  a  module  being  monitored  'will  be 
characterized  statistically  assuming  stationary  and 
independent  input  statistics. 

The  referenceless  on-line  monitoring  strategy  used 
to  test  modules  under  the  assumptions  above  is  summarized 
below.  A  pt-tct-i 

1)  Define  a  set  of  points  to  be  monitored.  In  genera 
there  will  include  inputs  (x) ,  outputs  (z) ,  and 
internal  state  values  (s)  . 

2)  Derive,  for  the  states  and  outputs,  an  expected 
value  of  the  statistics  Es(x)  and  Dz(x)  as  a  function 
of  the  input  statistic  x. 

3)  Derive  a  test  stringency  s  and  test  length  based 
on  a  desired  test  quality,  false  alarm  rate,  and 
escape  rate.  This  will  involve  the  definition  of  a 
fault  model  and  the  fault  density  functions  t(x,z)  , 

<f>  ( x  ,  s )  . 

4)  During  system  execution  the  fault  monitor  will 

•  For  an  experiment  of  length  ><*  gather  stati'* 
on  x ,  s ,  and  z  . 
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•  Indicate  a  failure  if  a  measured  statistic 
(e.g.,  m  z)  is  outside  the  acceptance  window 
for  the  expected  value  of  this  statistic  as  a 
function  of  the  measured  input  statistic  mx, 
that  is,  the  experiment  fails  if  mz  >  Ez(mx)+s 
or  mz  <  Ez(mx)-e  and  passes  otherwise. 

The  next  section  provides  a  background  for  the  problem, 

namely  analyzing  the  efficiency  of  referenceless  random 

testing  for  BIT,  and  reviews  the  current  work  related  to 

the  subject. 

1 . 3  Problem  Background  and  Literature  Review 
Random  test  generation  methods  for  digital  circuits 
have  been  used  to  overcome  some  of  the  computation  costs  of 
deterministic  methods  [8].  In  these  methods,  random  inputs 
are  fed  into  the  circuit  under  test  and  the  outputs  are 
compared  with  a  stored  reference  or  the  output  generated 
by  a  "gold  unit".  The  practicality  and  effectiveness  of 
these  methods  have  been  analyzed  in  the  literature  [12,14, 
16].  Moreover,  these  studies  have  been  concerned  with  the 
error  latency  of  faults  in  digital  combinational  circuits. 
The  error  latency  of  a  fault  set  is  the  number  of  input 
vectors  applied  to  a  digital  circuit  while  a  fault  in  the 
fault  set  is  active,  until  the  first  incorrect  output  due 
to  that  fault  is  observed  [14].  Most  of  the  studies  dealt 
with  combinational  circuits;  however,  the  error  latency  of 
digital  sequential  circuits  was  also  analyzed  [13] .  These 
studies  showed  that  in  many  cases  random  testing  involved 
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much  less  computation  and  storage  requirements  than 
deterministic  methods  [14] . 
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Inherent  in  the  study  of  the  random  testing  of 
digital  circuits  is  knowledge  of  formulations  for  deriving 
output  probabilities  as  a  function  of  input  probabilities. 

Parker  and  McCluskey  [9]  presented  an  efficient  method  for 
relating  output  to  input  probabilities  for  combinational 
circuits.  They  also  applied  these  methods  to  the  analyses 
of  logic  circuits  with  faults  using  input  signal  proba¬ 
bilities  [10],  Relating  output  to  input  probabilities, 
however,  is  difficult  for  sequential  circuits;  and  no 
efficient  methods  exist.  One  method  is  to  model  the 
sequential  circuit' as  a  Markov  chain  and  derive  the  steady- 
state  probabilities.  A  more  efficient  method  is  to  derive 
the  probabilities  from  the  regular  expression  description 
of  the  sequential  circuit  [11].  This  method,  however, 
has  certain  shortcomings  which  limit  its  application. 

Although  random  testing  methods  using  a  reference  or 
"gold  unit"  offer  many  advantages,  for  instance,  possible 
fault  location  and  isolation  [15]  including  the  benefit  of 
short  input  sequences  [12,13,14],  the  need  for  a  reference 
or  "gold  unit"  limits  its  applicability  for  on-line  testing 
of  digital  circuits.  A  new  testing  method  which  does  not 
require  prior  test  generation  has  recently  been  implemented 
in  some  test  equipment  [8],  In  this  method,  random  inputs 
are  fed  into  the  circuit  and  the  averages  of  the  outputs 
(one  count  or  transition  count)  are  obtained.  These  averaces 
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are  compared  with  simulated  averages  or  averages  obtained 
from  a  fault-free  circuit.  Based  on  the  comparison,  the 
circuit  passes  or  fails  the  test.  The  Fluke  Trender  1000 
Logictester  is  an  example  of  commercial  testers  that  use 
this  method.  This  test  method  is  known  in  the  literature 
as  referenceless  random  testing  [8] .  Since  this  method 
does  not  require  a  reference  or  "gold  unit"  and  only 
knowledge  of  input  and  output  statistics  is  required,  the 
application  of  this  method  to  on-line  testing  of  digital 
circuits  seems  possible. 

In  evaluating  the  effectiveness  of  referenceless 
random  testing,  Losq  [8]  used  the  following  measures  of 
effectiveness . 

•  Probability  of  false  alarm:  the  probability  that 
a  fault-free  circuit  fails  the  test. 

•  Probability  of  escape:  the  probability  that  a 
faulty  circuit  passes  the  test. 

The  probability  of  false  alarm  depends  only  on  the  fault- 

free  output  statistics,  the  experiment  length,  M ,  and  the 

test  stringency,  £ .  The  test  stringency  defines  an 

acceptance  window 

A  =  [Zj-e ,  z j+e] , 

where  Zj  is  the  fault-free  statistic,  for  which  the  circuit 
passes  the  test.  Losq  obtained  an  upper  bound  for  the 
probability  of  false  alarm  which  depended  on  the  test  length 
and  stringency.  It  was  found  that  this  probability 
decreases  dramatically  as  the  test  length  and/or  the  test 
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stringency  were  increased  (prob (false  alarm)  <  erfc(e/2N)). 
The  escape  probability,  however,  is  difficult  to  obtain. 

Losq  presented  statistical  fault  models  for  large  complex 
combinational  circuits  and  Read  Only  Memories  (ROMs)  and 
approximated  the  escape  probability  for  these  circuit's. 

His  results  indicated  that  referenceless  random  testing 
is  an  efficient  method  for  testing  combinational  circuits 
and  ROMs.  The  evaluation  of  the  probability  of  escape  for 
digital  sequential  circuits  is  difficult  and  has  not  been 
reported.  This  research  will  attempt  to  tackle  this  problem. 

To  obtain  the  escape  probability  for  any  digital 
circuit,  the  fault  density  function  must  be  derived.  This 
function,  cf>(z),  is  the  density  of  faulty  circuits  having 
the  same  output  statistic  under  specified  input  statistics. 
The  function  depends  on  the  internal  structure  and  the 
statistical  fault  model  of  the  circuit.  Since  we  are 
interested  in  the  on-line  testing  of  fielded  electronic 
equipment,  l.z.,  equipment  that  has  passed  design  and 
manufacturing  acceptance  tests,  and  since  accurate  evalua¬ 
tion  of  che  escape  probability  is  required,  an  adequate 
fault  model  must  be  chosen.  One  such  model,  known  as  the 
pin-package  fault  model,  has  been  evaluated  by  Ketelson 
[6],  According  to  Ketelson,  the  pin  fault  model  "appears 
to  retain  an  acceptable  degree  of  fault  coverage  while 
allowing  fault  analyses  and  test  generation  to  remain  within 
the  realm  of  computational  feasibility."  Furthermore,  he 
states  that  "available  failure  data  for  digital  integrated 
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circuits  shows  the  dominant  failure  mechanism  to  be  'dead 
bond'  failure."  Failures  also  occur  at  the  interconnections 
between  integrated  circuits  and  between  integrated  circuit 
package  pins  and  the  silicon  chip  itself  [6].  Electrical 
overloading  also  causes  failures,  for  example,  overshoots 
on  a  pin  may  damage  input  or  output  transistors.  All  of 
these  failures  are  implied  and  included  in  the  pin-package 
fault  model. 

A  statistical  pin-package  fault  model  will  be  used  in 
this  report  for  the  derivation  of  the  fault  density  function 
and,  therefore,  the  probability  of  escape  of  modular 
digital  circuits. 

1 . 4  Research  Objectives  and  Approach 

The  purpose  of  this  study  is  to  develop  procedures  to 
accurately  derive  the  fault  density  function  of  modular 
digital  sequential  circuits  using  the  statistical  pin- 
package  fault  model.  This  function  is  used  in  the  a  c-tic-tl 
analyses  of  the  efficiency  of  referenceless  random  testing 
in  Built-In-Test  (BIT) . 

The  study  begins  with  a  development  of  procedures  for 
relating  the  output  and  state  probabilities  of  sequential 
circuits  to  the  input  signal  probabilities.  Several  methods 
are  analyzed.  Next,  a  simple  single-input  four-state 
sequential  circuit  is  examined  to  determine  testability 
measures  useful  in  evaluating  the  efficiency  of  referenceless 
random  testing  for  the  detection  of  faults  in  the  circuits 
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(see  Chapter  3).  In  Chapter  4,  procedures  for  evaluating 
the  fault  density  function  for  various  digital  sequential 
circuits  under  the  statistical  pin-package  fault  model 
assumption  are  given.  Chapter  5  presents  results  showing 
the  escape  probability  as  a  function  of  input  statistics 
for  two  types  of  sequential  circuits.  These  results  are 
used  to  set  up  simulation  experiments,  the  results  of  which 
are  also  included  in  the  chapter.  Finally,  in  Chapter  6, 
conclusions  are  made  and  recommendations  are  suggested  for 
future  research. 

The  appendices  describe  programs  used  to  compute  the 
escape  probabilities,  to  simulate  experiments,  and  to 
obtain  three-dimensional  plots. 
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2  STEADY-STATE  PROBABILITIES  OF  SEQUENTIAL  CIRCUITS 


2 . 1  Introduction 

In  this  chapter  methods  are  presented  for  obtaining 
the  steady-state  state  probabilities  of  sequential  circuits 
First,  Markov  chains  are  analyzed  since  sequential  circuits 
under  random  inputs  behave  as  first-  order  Markov  chains. 
Secondly,  regular  expressions  are  reviewed  and  a  method  for 
obtaining  steady-state  probabilities  from  regular  expres¬ 
sions  is  given.  Next,  methods  for  obtaining  the  steady- 
state  probabilities  directly  from  the  circuit  are  examined. 
One  method  takes  advantage  of  iterative  networks.  The 
other  method  is  more  general  and  shows  how  the  regular 
expression  of  a  state  or  output  can  be  obtained  directly 
from  the  circuit.  From  this  regular  expression,  the 
steady-state  probability  can  be  derived.  Finally,  each 
method  is  compared  and  the  situations  where  each  is  better 
applicable  are  discussed. 

2 • 2  Markov  Chain  Model  of  Sequential  Circuits 
Deterministic  sequential  circuits  under  random  inputs 
possess  the  Markov  property  that  the  probability  of  being 
in  a  given  state  at  time  n  depends  only  on  the  state  of 
the  circuit  at  time  n-1  and  the  probabilities  of  the  input 
vector  at  time  n-1.  Therefore,  the  behavior  of  sequential 
circuits  under  the  application  of  random  inputs  can  be 
modeled  as  a  finite  first  order  Markov  chain.  The  chain 
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is  ergodic  if  the  circuit  is  strongly  connected,  -i.t.,  it 
is  possible  to  reach  any  state  from  a  given  state.  This 
requires  that  for  ergodic  Markov  chains,  the  steady-state 
probabilities  are  non  zero.  Finally,  the  Markov  chain 
is  stationary  if  the  input  probability  distributions  are 
independent  of  time.  Hence,  in  order  to  analyze  the 
probabilistic  behavior  of  sequential  circuits  we  present  a 
brief  development  of  Markov  chain  theory.  The  definitions 
are  taken  from  [12]  with  modifications  in  nomenclature. 

Definition :  The  state  probability  tt^  (n)  of  state  Sj  at 

time  n  is  the  probability  that  the  circuit  is  in  state  Sj 
after  the  nfc^  input.  The  state  probability  vector  ~  (n) 
is  a  row  vector  whose  jth  element  is  the  state  probability. 

The  sum  of  the  elements  of  a  probability  vector  must 
equal  one.  The  state  probability  vector  lists  the  state 
probability  distribution  at  time  n. 

Definition :  The  n-step  transition  probability  P^j  (n)  is 

the  conditional  probability  of  entering  state  S^.  The 
transition  matrix  P  is  tne  square  matrix  whose  entry  at  the 
jth  row  and  ith  column  is  P^j(l)  (the  one-step  transition 
probability) . 

The  one-step  transition  probabilities  for  a  sequential 
circuit  are  obtained  by  summing  the  probabilities  of  the 
input  vectors  that  cause  a  transition  from  to  Sj. 

Each  row  in  the  transition  matrix  must  sum  to  one. 
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Each  state  probability  tt^  (n)  is  described  by  the 
equation 

TTj  (n)  =  l  Tri(n-l)Pij  (1)  (2.1) 

Equation  (2.1)  in  matrix  form  is 

TT(n)  =  tt  (n-1)  P  (2.2) 

By  repeated  application  of  (2.2) 

tt  (n)-ir  (0)  (P-  •  -p  (P  (P)  )  )  )=tt  (0)Pn  (2.3) 

The  vector  tt  ( 0 )  is  the  initial  state-probability  vector. 

The  entry  at  the  row  and  its  column  of  Pn  is  the  n-step 

transition  probability  P^j  (n) .  This  concludes  the  develop¬ 
ment  as  presented  by  [13].  We  provide  below  Example  1  [2] 
in  order  to  help  clarify  the  ideas. 

Example  1:  In  the  sequential  circuit  described  by 
the  state  diagram  of  Figure  2.1,  the  transition  matrix  is 


0 

Figure  2.1  State  diagram  for  example  sequential  circuit 
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where  p  is  the  probability  of  the  input  being  a  logical  1 
and  q=l-P.  Assume  tt(0)  =  [0.3  0.4  0.2  0.1]  then  a  straight¬ 
forward  calculation  gives 

tt(1)=tt(0)P=[0.22  0.28  0.34  0.16] 

it  (2)  =tt  (1)  P=tt  (0)  PP=ir  (0)  P2=  [0 . 316  0.244  0.256  0.184] 
it  (3)=tt(0)P3=[0.268  0.304  0.232  0.196] 

*  1  0 

it(10)=7t(0)P  =[0.249  0.251  0.254  0.246] 

tt  (o°)  =tt  (0)  P°°=  [0 . 250  0.250  0.250  0.250] 

The  above  calculations  illustrate  two  interesting  facts. 
First  we  observe  that  for  sufficiently  large  n,  tt  (n)  becomes 
independent  of  the  initial  state  distribution  ‘V  (0 )  .  Second, 
the  state  distributions  fluctuate  about  their  steady  state 
value.  These  observations  lead  to  a  study  of  the  dynamical 
properties  of  a  Markov  process  [2] .  Below  it  is  shown  that 
for  ergodic  Markov  chains  the  steady  state  distribution  of 
probabilities  is  independent  of  the  initial  state. 

2 . 3  Steady-State  Probabilities 
Since  the  transition  matrix  P  is  non-singular  (the 

,  p 

process  is  ergodic) ,  we  obtain  for  P 

Pn=TAnT"1  (2.4) 

where  T  is  the  matrix  of  left  eigenvectors  of  P  and  A  is  a 
diagonal  matrix  with  diagonal  elements  the  eigenvalues 
of  P.  In  general  each  eigenvalue  of  a  matrix  B  with 
positive  or  zero  elements  satisfies  at  least  one  of  the 
inequalities 
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(2.5) 


where  the  prime  indicates  the  term  i=j  in  the  sum  is 
omitted.  Since  the  rows  of  the  matrix  P  sum  to  one,  using 
(2.5)  we  conclude  that 


Xj  <  1  (2.6) 

where  are  the  eigenvalues  of  P .  We  are  interested  in 
the  limit 

P  =  Lim  Pn  =  T  Lim  An  T_1.  (2.7) 

n-*0®  n-*-00 


I"1  ^ 

From  (2.6)  we  conclude  that  Lim  A  =  A  is  independent  of  n. 

n-*-® 

Thus  P  possesses  a  limit  as  n-*-®.  Furthermore,  the  limit 
converges  as  quickly  as  the  largest  A ^  for  A ^  ?  1.  Now, 
we  have 


$  =  Lim  Pn+1=  P  Lim  Pn  =  PP.  (2.8) 

For  a  k  state  process,  (2.8)  will  be  satisfied  if  P  has 
the  form 


(2.9) 


where  tt  .  is 
i 

the  initial 
tribution  tt 


TF 


k 

a  nonzero  constant  and  J  tt  •  =1. 

i  =  l  1 

state  distribution  then  the  steady 
can  be  written 

=  Lim  Tr(0)Pn  =  a(0)P  =  [-  -  •• 

n-® 


If  -r  (0)  is 
state  dis- 


l 

k'  • 
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Hence,  the  rows  of  P  correspond  to  the  steady-state  value 

of  the  state  probability  vector.  To  obtain  tt  without 

taking  the  limit  Lim  Pn  we  note  that 

n-*« 

tt  =  Lim  tt  (n)  =  Lim  r(n-l)P  =  ttP.  (2.10) 

n-t-co 

Using  (2.10),  the  following  system  of  equations  is  obtained: 


1T1P11  +  *2P21  +' 


■+  TT,  P.  ,  =  TT. 

k  xl  1 


TT  ,  t 


V  12 


+  TT-P--  +•  •  •+  TT, 


2  22 


k  "  k2 


=  TT. 


(2.11) 


tt  P  +  TT  P  4* 

1*  lk  2*  2k 


IT,  P,  , 
k  kk 


k* 


where  the  P^  are  the  one-step  transition  probabilities. 
Since  one  equation  of  (2.11)  can  be  found  from  a  linear 
combination  of  the  other  equations,  the  system  of  equations 
must  include  the  equation 


k 

l  TT  .  =1  .  (2.12) 

i=l  1 

The  example  which  follows  illustrates  this  procedure  and 
derives  steady-state  probabilities  from  a  state  diagram. 
Example  2 

The  state  diagram  of  a  J-K  flip-flop  is  shown  in 
Figure  2.2(b) . 


J=1 
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The  eigenvalues  of  P  are  X^=l  and  X2=l-(j+k).  The  eigen¬ 
vectors  corresponding  to  X^  and  X 2  are  t^=[^]  and  t^= [-^k] 

U 

respectively.  Using  (2.4)  we  have 


.  r> 


p  = 


1  -  jj  [0  l-(j+k) 


n  k 
j 


j+k  • 


Taking  the  limit  of  pn  as  n+=°  we  have, 

fi  il  Fi  o 


t\i  n 

P  =  Lira  P 


I  o’ 

- 

] 

0  0 

r — 1 

I 

1 — 1 

J 

—  - 

j-k 


j+k  j+k 


L  j  +k  j+kj 

-i 

Thus  an(i  7T2=5+k  are  tke  steadY  state  probabilities 

of  states  and  s2  ,  respectively.  As  an  alternative,  using 
(2.11)  and  (2.12)  we  can  write 

(l-j)r1  +  kr2  =  ir1 


”1  +  ’2  "  1 


from  which  ~ 


and  = 


as  before.  We  can  now 


apply  these  ideas  in  Example  3  to  a  more  realistic  and 
complex  sequential  circuit  in  order  to  demonstrate  the 
power  of  the  technique. 

Example  3 

The  state  diagram  of  a  3-bit  synchronous  counter 
similar  to  the  74163  four-bit  counter  excludinc  the 
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programmable  inputs  is  shown  in  Figure  2.3.  A  block 
diagram  of  the  device  and  a  table  of  input  definitions 
is  shown  in  Figure  2.4. 

Let  s^,  i=0,7  denote  the  steady-state  probabilities 
of  the  states  and  r,  1,  p  denote  the  probabilities  of  R, 

L,  and  p  .  From  the  state  diagram  according, to  (2.11) 
and  (2.12)  and  taking  into  account  the  preset  inputs  A,  B, 
and  C  with  probabilities  a,  b  and  c  we  can  write  the  system 
of  equations 

Sq  =  Sgp£r  +  £rabc  +  r  +  p£rs^ 

S1  =  s]_P^r  +  +  p£rsQ 

s2  =  S2?£r  +  Irabc  +  p£rs^ 

•  • 

•  • 

*  _  _  • 

Sg  =  Sgp£r  +  £rabc  +  p£rs^ 

s -j  -  s^p£r  +  Irabc  +  p£rSg  . 

The  above  equations  lead  directly  to  a  generalization 
for  M-bit  programmable  synchronous  circuits.  We  can  write 
then,  making  the  substitutions  p£r=a,  p£r=S,  Lr=y ,  and  i^ 
for  the  input  combinations  A,  B,  and  C  (e.o.  ,  i^=abc)  , 

(N=M-1)  , 


so  =  aso 

+ 

Ss7  + 

Yio  ■ 

S1  =  0S1 

+ 

Ss0  + 

Yil 

s  2  =  as2 

+ 

Ss  ^  + 

Yi2 

SN  =  aSN 

+ 

3sN-1 

+  yi 

N 

c 

si  = 

i 

• 
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h  r 

pa 

ra 

lie 

ca 

se 

s  a 

1 


Solving  for  s  we  have 
n 


„n  _ 

S  Sn  - 

Sn  =  - 2 „  +  Y  T 

n  ,  >  n 


n-k 
n  6  i, 


( 1-ct)  k=l  ( 1-a) 


n+l-y.  n?!0  '  n=1 '  ’  •  •  /N 


N 

S0  -  1  -  l  sn ‘ 

n=l 


Substitution  and  solving  for  sQ  we  obtain 


N  n 


l-Y  l.  .1  «n-V«1-) 


n+l-k 


s0  = 


n=l  k=l 


N  cn 
1+  l  -  7  n 


n=l 


(1-a) 


N  n 


j  l-Y  I  l  Bn  kik/(l-a) 
6 J  ■  n=l  k=0  * 

(1-a)-1  N  n 

1  +  l  vl-rr-n 


s  . 
3 


n^l-k 


n=l 


(1-a)' 


6j-ki. 


Y 


k=l  (1-a) 


-n) 3+l-h 


j  *  0, 


Q 

Making  the  substitution  X=  we  finally  obtain 

1-a 


1- 


i  N-l  M  ,  . 

1  1  I 


so  = 


1-a  '1-X'  L.  "k 
k=l 


N  n 

1  +  I  * 

n=l 


(2.13) 


Equations 
describing  the 
counter  with  a 


•  i,N 

s0  +  y  XD_k  i.  j=l  f  2  ,  •  •  •  ,S.  (2.14) 

k=l 

(2.13)  and  (2.14)  are  general  equations 
steady-state  probabilities  for  an  n-bit 
configuration  corresponding  to  Figure  2.4. 
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Using  (2.13)  and  (2.14)  it  is  now  possible  to  describe 
the  probability  behavior  of  the  states  of  the  counter  as  a 
function  of  its  input  probabilities. 

In  Figure  2.5  we  present  a  three-dimensional  plot  of 
the  probability  of  state  versus  the  LOAD  and  RESET 
input  probabilities  for  a  four-bit  synchronous  programmable 
counter.  State  S^  corresponds  to  CA=1,  Qg=0 ,  Q  =0 ,  and 
Qg=0.  The  input  probabilities  for  A,B,C,D,  and  PT  are  held 
constant  as  indicated  in  the  figure. 

We  introduce  at  this  point  the  usefulness  of  these 
ideas  with  respect  to  fault  detection.  Figure  2.6  shows 
the  three-dimensional  plot  of  state  S^  with  preset  input 
C  stuck-at-one  (prob (c) =1 . 0 ) .  Comparing  Figures  2.5  and 
2.6,  we  can  observe  the  change  in  state  probability  due  to 
a  single  stuck-at-f ault . 

In  this  section  we  have  presented  a  concise  development 
of  Markov  chains  necessary  for  analyzing- the  probabilistic 
behavior  of  sequential  circuits.  Furthermore,  we  have 
illustrated  with  an  original  example  the  power  of  Markov 
chain  analysis  by  deriving  the  steady-state  state  proba¬ 
bilities  of  a  general  n-bit  synchronous  counter. 

Considering  the  extensive  literature  available  on 
Markov  chains,  it  would  seem  that  the  introduction  of  new 
methods  for  the  computation  of  steady-state  probabilities 
is  useless.  In  this  research,  however,  we  are  interested 
in  efficient  methods.  Although  the  system  of  equations  for 
the  steady-state  probabilities  can  be  written  down  directly 
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from  the  state  diagram,  according  to  Markov  chain  analysis, 
the  solution  of  these  equations  especially  where  formulae 
are  required  is  difficult  and  not  straightforward.  In  the 
next  section  a  convenient  method  is  presented  where  the 
state  probabilities  are  directly  found  from  the  regular 
expression  of  a  state  expressed  in  synchronized  form. 
Furthermore,  using  the  Markov  chain  analyses  it  is  not 
possible  to  obtain  the  probabilities  directly  from  the 
circuit.  A  method,  however,  exists  for  deriving  the 
regular  expression  of  states  and  outputs  directly  from  the 
circuit.  From  these  expressions  it  is  possible  to  directly 
write  down  the  input/output  probability  equation.  The 
next  section,  therefore,  introduces  regular  expressions 
and  shows  how  the  steady-state  probabilities  can  be 
obtained  from  these  expressions. 

2 . 4  Steady-State  Output  Probabilities  from 
Regular  Expressions 

2.4.1  Introduction 

A  method  which  can  potentially  provide  substantial 
savings  in  the  computation  of  output  probabilities  is  the 
regular  expression  investigated  by  Parker  and  McCluskev 
[11] .  This  approach  requires  the  existence  and  knowledge 
of  synchronizing  sequences  for  the  machines.  This  limits 
the  usefulness  of  the  approach  since  these  sequences  dc  not 
exist  for  all  machines.  In  addition,  the  presence  of  a 
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fault  may  alter  a  machine's  synchronizing  sequence 
resulting  in  very  tedious  fault  analysis. 

However,  when  regular  expressions  are  derived  directly 
from  the  sequential  circuits  [11]  they  can  be  put  in  a 
form  such  that  the  output  probability  can  be  easily 
computed.  In  the  next  sect-ion  regular  expressions  are, 
reviewed  and  examples  are  provided.  The  concept  of  the 
derivative  of  a  regular  expression  is  also  examined. 

Finally,  the  method  for  obtaining  the  steady-state 
probabilities  for  regular  expressions  is  analyzed.  The 
ideas  developed  in  these  sections  will  be  used  in  discus¬ 
sing  the  derivation  of  output  probabilities  directly  from 
sequential  circuit  implementations. 

2.4.2  Review  of  regular  expressions 

A  background  in  regular  expressions  is  given  below 
which  is  taken  from  the  paper  by  Parker  and  McCluskey  [11] . 
Further  discussions  of  regular  expressions  can  be  found  in 
textbooks  such  as  Xohavi  [7]  and  Eooth  [2] .  Booth  provides 
a  useful  list  of  references  for  further  study  of  the  topic. 

Regular  expressions  are  defined  recursively  as  follows: 
given  an  alphabet  t ao ' ai ' a2  '  " ’ ’ ak-l ^  ^  an(^  e  > 

and  the  regular  operators  ' and  ' * '  and  parentheses, 

1)  a  string  consisting  of  a  single  alphabet  symbol, 
single  X,  or  single  d  is  a  regular  expression. 

2)  If  ?  and  Q  are  regular  expressions,  then  so  are 
(P+Q)  ,  (P-Q)  ,  and  P*. 
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3)  No  other  string  of  symbols  is  a  regular  expression 
unless  it  follows  from  (1)  and  (2)  in  a  finite 
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number  of  steps . 

Regular  expressions  represent  sets  of  sequences  of 
symbols.  The  symbol  X  represents  the  sequence  of  zero 
length.  The  symbol  d  represents  the  null  or  empty  set  of 
sequences.  The  operation  ' +'  in  P+Q  denotes  the  union 
of  the  sets  P  and  Q.  The  operation  in  P-Q  (from  now 

on  written  as  PQ  with  understood)  is  the  concatenation 

elements  P  and  Q.  In  general,  concatenation  is  not 
commutative,  -i.e.,  PQ  may  not  equal  QP .  The  star  operator 
'*'  or  iterate  of  a  set  is  defined  as  the  infinite  union 


p*  =  1  + 

P  +  PP  +  PPP  +  •  •  •  , 

(2.15) 

which  we  abbreviate  as 

p*  _  y  pi 

(2.16) 

i=0 

where  P1  is  i  copies  of 

P  concatenated  and  ?°  is 

defined 

as  X .  Given  that  P ,  Q , 

and  R  are  regular  expres 

sions  , 

then  the  following  prope 

irties  hold 

PXQ  =  Q+p 

(+  commutative) 

(2.17) 

(P+Q) +R=P+ (Q+R) 

(+  associative) 

(2.18) 

(PQ) R=P (QR) 

(•  associative) 

(2.19) 

PQ  +  PR  =  P (Q+R) 

(left  distributive ty ) 

(2.20) 

PR  +  QR  =  (P+Q) R 

(right  ais tributivitv ) 

(2.21) 

R+q  =  <t>  +  R  —  R 

(+  identity) 

(2.22) 

Rd)  =  0R  =  <ti 

( •  zero) 

(2.23) 

RX  =  XR  =  R 

(•  identity) 

(2.24) 

R  +  R  =  R 

( idempotency) 

(2.25) 

X*  =  X 

(2.26) 

II 

* 

(2.27) 
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Definition  2.1;  The  derivative  [3]  of  a  regular 
expression  R  with  respect  to  a  sequence  a,  denoted  DR, 

Cl 

is  another  regular  expression  given  by 


D  R  =  (s  *  as  s  R} 

cl 


Also , 


D 


ab* 


=  D,  (D  R)  . 

D  a 


(2.28) 


(2.29) 


Definition  2.2:  The  symbol  I  is  reserved  for  the  union 
of  the  alphabet  symbols  and  constitutes  a  DON'T  CARE  symbol 
of  length  1.  Then  I*  is  the  set  of  all  possible  strings. 
This  completes  the  background  on  regular  expressions 
obtained  from  Parker  and  McCluskey  [11] . 

Consider,  as  an  example,  the  machine  described  by  the 
state  diagram  of  Figure  2.7.  The  input  alphabet  is 
A2=[0,1].  The  regular  expression  description  of  the 
machine  is 

R»(0+1) *10 (10+00) *.  (2.30) 


0/1 


Figure  2.7  State  diagram 


The  regular  expression  (2.30)  states  that  the  machine  will 
have  an  output  whenever  the  sequence  10  is  applied  to  the 
input  regardless  of  the  previous  inputs.  The  sequence  10 
is  thus  a  synchronizing  sequence  for  the  machine. 
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1 

Also,  when  the  sequence  10  is  applied  to  the  machine,  the 
machine  will  continue  to  produce  an  output  for  any  combi¬ 
nation  of  the  union  10+00  following  the  secuence.  These 
are  easily  derived  and  verified  from  the  state  diagram  of 
the  machine.  We  will  be  interested  in  writing  down  the 
steady  state  output  probabilities  of  the  machine  of 
Figure  2.7  directly  from  the  regular  expression  (2.30). 

We  will  need,  however,  to  introduce  the  following  defini¬ 
tions  again  taken  from  Parker  and  McCluskey  [11] . 

Definition  2.3:  A  sequence  s  is  defined  to  be  a 
substring  of  a  regular  expression  R,  denoted  as  s  e  sub(R) , 
iff  there  exists  an  nel*  such  that  DnsR^i .  If  s  £  sub(R) 
then  for  some  reR,  the  sequence  is  embedded  in  r.  For 
example.  Oil  is  a  substring  of  110110,  since  there  exists 
an  nel*(n=ll)  such  that  (110110)=0,-i .  However,  111  is 

not  a  substring  of  110110. 

Definition  2.4:  A  s imple  expression  (or  elementary 
expression)  is  the  concatenation  of  zero  or  more  alphabet 
symbols . 

Definition  2.5:  A  finite  composite  expression  is  the 
union  of  a  finite  number  of  simple  expressions.  Example: 

T=ab+bc+acb  is  a  finite  composite  expression. 

Definition  2.6:  An  infinite  composite  expression  is 
the  star  iterate  of  a  finite  composite  expression. 

Example:  Ts(a+ab+abca)  *  is  an  infinite  composite. 
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Definition  2.7:  A  concatenate  composite  expression  is 
the  concatenation  of  two  or  more  finite  or  infinite  com¬ 
posite  expressions.  For  example,  let  A , B  be  finite 
composite,  C  be  infinite  composite.  Then  ABC,  A*B ,  AB* , 
and  A*B *  are  concatenate  composities,  as  is  AB,  but  AB  by 
distributivity  reduces  to  another  finite  composite. 

Definition  2.8:  All  other  expressions  that  are  not 
simple,  finite/infinite/concatenate  composite  in  form  are 
called  complex  expressions.  For  example,  (ab*c+a*b) *  is 
complex . 

Definition  2.9:  A  delay  expression  is  a  special 
case  of  concatenate  composite  expression  of  the  form 
T=I*S  for  some  finite  composite  S. 

Definition  2.10:  A  synchronized  expression  is  of  the 
form  I *SR  where  S  is  finite  composite  and  R  is  a  regular 
expression.  Delay  expressions  are  a  special  case.  The 
name  "synchronized"  stems  from  the  machine  realization, 
where  S  represents  a  set  of  synchronizing  sequences  [11] . 

To  determine  the  acceptability  of  a  synchronized  expression, 
all  symbols  back  to  the  last  occurrence  of  s  S  must  be 
examined . 

Definition  2.11:  Given  an  alphabet  I=ag , a^ , • • • , a^_ , , 
define  the  probability  P(a^)  of  the  symbols  as  a  set  of 
real  numbers  such  that  0<P(a^)<l.  Furthermore,  define 
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Lemma  2.1:  The  probability  of  a  simple  expression  of 
length  m_>0  is  given  by  the  product  of  the  probabilities 
of  its  symbols.  For  example,  for  E=abc,  the  probability 
of  this  expression  is  P (a) ? (b) ? (c) .  We  are  assuming  that 
all  appearances  of  any  symbol  at  any  place  in  an  event 
are  independent  of  any  other  symbol . 

2.4.3  Steady-state  probabilities 

We  examine  the  synchronized  expression  of  definition 
2.10  given  in  (2.31).  The  English  description  of  a 
recognizer  of  (2.31)  is  [11]  the  machine  that  accepts  any 
string  ending 

R  =  I *ST*  (2.31) 

in  S  followed  by  zero  or  more  occurrences  of  T.  Parker 
and  McCluskey  introduce  an  improper  machine,  shown  in 
Figure  2.8,  that  recognizes  I*ST*.  In  the  machine,  V  is 
the  set  of  all  strings  that  do  not  contain  an  embedded  S. 
Also,  U  is  the  set  of  all  strings  that  do  not  contain  an 
.embedded  S  or  T.  They  then  use  concepts  in  steady-state 
Markov  chain  analysis  to  arrive  at  the  steady-state  output 
probability  of  the  machine  of  Figure  2.8.  Thus,  if  s=?(S) 
and  t=P  (T)  we  can  write 

PB  =  (s+t)PB  +  s?A  (2. 32) 

PB  +  PA  =  1.0.  (2.33) 

Solving  the  above  eauations  for  P„  we  obtain 

s 

P  (state  3)  =  ?  ( I  *ST* )  =  s/(l-t).  (2.34) 
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Parker  and  McCluskey  thus  give  and  prove  the  following 
theorem. 

Theorem  2.1:  Given  simple  S  and  T  with  T r'\ , 
s  £  sub  (T* ) ,  E=I*ST*,  s=P  (S)  ,  and  t=P (T)  ,  then  Pro (E) =s/ (1-t) . 

Example :  Referring  back  to  the  machine  of  Figure  2.7 

we  note  that  the  regular  expression  (2.30)  describing  the 
machine  is  a  synchronized  expression.  We  thus  apply 
Theorem  2.1  and  obtain  (P (S) =p (1-p)  ,  P (T)  =  ( 1-P ) ^ )  , 

P  (state  B)=P  [I*  (01)  (00)  *]  =  p-'jh  If]  2  =  (2.35) 

The  above  result  can  also  be  obtained  by  steady-state 
Markov  analysis: 

P_  =  (1-P)  P.  (2.36) 

Pn  +  P.  =  1  (2.37) 

B  A 

PB  =  ( 1-P ) /  ( 2-P )  .  (2.38) 

We  have  shown  how  the  steady-state  probabilities  of 
a  sequential  circuit  can  be  obtained  from  regular  expression 
descriptions  of  the  states  and  outputs  expressed  in  synch¬ 
ronized  form. 

Through  an  example  we  illustrate  the  straight! crvard- 
ness  of  the  procedure  and  the  advantage  of  the  method  over 


1-121 


the  normal  Markov  method  of  solving  a  system  of  equations. 
The  disadvantages  of  the  method  are  associated  with  the 
difficulty  in  obtaining  regular  expression  descriptions  of 
sequential  circuits  in  synchronized  form.  Synchronizing 
sequences  and  sequences  that  return  the  machine  to  a  given 
state  are  not  easily  derived  from  a  state  diagram  descrip¬ 
tion  of  the  machine.  As  in  the  Markov  analysis,  using  this 
method  output  probabilities  are  obtained  independent  of 
the  actual  implementation  of  the  sequential  circuit. 
However,  a  method  exists  which  is  discussed  below  for  which 
the  regular  expression  is  derived  directly  from  the  circuit 
The  advantage  of  using  the  circuit  is  that  resulting  regula 
expression  is  in  synchronized  form.  Hence,  the  applica¬ 
bility  of  the  derivation  of  steady-state  probabilities  from 
regular  expressions, 

2 . 5  Derivation  of  Output  Probabilities  of  Iterative 
Sequential  circuits 

Due  to  their  structure,  iterative  sequential  circuits 
simplify  the  derivation  of  ‘the  output  probabilities  directl 
from  the  circuit.  In  this  section,  we  will  investigate 
this  procedure  for  obtaining  output  probabilities  by  way 
of  an  example. 

Figure  2.9a  shows  the  circuit  diagram  of  a  parallel 
load,  right-shift,  2-bit  shift  register.  In  Figure  2.9b 
the  iterative  structure  of  the  circuit  is  illustrated. 

The  circuit  diagram  for  each  cell  is  shown  in  Figure  2.10. 
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The  output  probability  of  the  cell  as  a  function  of  the 
input  probabilities  can  be  found  as  follows. 

Consider  the  point  X  in  Figure  2.10.  The  probability 
of  X  is  obtained  through  the  combinational  network  and  is 
given  by 

?  =  1-q .  .  +  q .  , m  +  m  a . 

x  j “1  hD-1  D 


where  <q ^ ^  is  the  shift  input  probability  f 
cell,  m  is  the  mode  control  probability  and 
parallel  load  probability  for  that  cell. 

The  probability  of  the  cell  output, 


rom  the  previous 
is  the 

,  can  be  found 


j 

using  the  steady-state  Markov  analysis,  from  the  srate 
diagram  of  the  flip-flop  shown  in  Figure  2.11. 


Figure  2.11  Flip-flop  state  diagram 

Thus , 

q  j  =  ( l-x)  q  j  -  (!-;■:)  (l-q^)  =  1-x 

where  q  ^  is  the  output  probability.  Substituting  for  x 
we  obtain 

q  j  =  1- (l-Oj_1+q  j_]_m  +  ma  j )  =  q^_1(l-m)  -  raa.. 

Thus,  the  output  probability  of  a  ceil  can  be  expressed  as 
a  function  of  the  inputs  for  the  cell  and  the  output  of  the 
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previous  cell.  The  general  expression  of  a  cell  output  as 
a  function  of  the  shift  input  s,  model  control  m,  and 
preset  probabilities  a^  ( j=0 ,  • • • ,n-l)  can  be  derived  as 
shown  below. 

c  q  —  srn  +  rna.Q 

-  -2  - 

=  (sm  +  maQ)m*rma^  =  sn  +rrjnaQ  + 

-2  -  -  “3  -2  - 

q2  =  (sm  +mmag+ma^)  m+ma2=sm  -“-mm  ag+mma^+r^ 

and  in  general 

—  i  +  1  ^  —  v  — 

q.=smJ  +m  )  m"a._.  ,  (m=l-m) .  (2.39) 

J  k=0  'J~' 

Note  that  in  the  iterative  structure  above,  the  cell 
outputs  Q j  depends  only  on  Q^_,  ' r. c  r.cr  cr.  Q _ _ .  .  Thus 
cell  structure,  shown  in  Figure  2.9b.  allows  for  the 
simple  calculation  of  cell  cutout  pr  :::  ah  u  lutiea  as  illus¬ 
trated  by  the  example  above.  Thus  as  because  in  the  cell 
Boolean  output  function 

C  .  x  f  .  ^  x  ^  »  X  •  /  '  ’  ’  v  f  ^ 

*3  "3  m  Z  ‘  ‘ “ : -  1 


the  random  inputs  x.  (i=0,  *  *  * ,  )  and  the  random  output  Q__. 

J  — 

are  independent.  This  is  true  if  the  current  random  value 
on  an  input  line  is  independent  of  the  previous  random 
values  on  the  line.  Because  cf  this  property,  the  method 
of  obtaining  output  probabilities  from  input  probabilities 
for  combinational  circuits  can  be  used  [9],  This  justi¬ 
fies  (2.39)  in  the  example  above. 

The  cell  outputs,  however,  are  not  independent.  For 
instance,  in  Figure  2.12,  Q j  and  are  not  independent. 
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Figure  2.12  Non-feedback  cell  structure 

1)  Qj_1  and  ( i=0 , 1 ,*•*,£ )  are  independent.  Since 
is  a  Boolean  function  of  the  pteu-toa-6  values  of  the 

inputs  x^~  ^  and  since  the  current  values  of  the  inputs 
xit  are  independent  of  p-xzvic values,  then 

and  the  inputs  xit  are  independent. 

2)  Qj  and  Qj_j_  are  not  independent.  is  a  function 

t-1  t— 1 

of  and  the  inputs  x^ 


_t  . 

Q.  i  also  aeoenas  on  x. 

D-l  1 


t-1 


t  t  t  —  I 

Thus  since  ana  both  depend  on  ,  they  are  not 

independent . 

Consider  the  shift  register  of  Figure  2.9.  With  the 
state  assignment  of  Table  2.1  and  using  steady-state  Marko; 
analysis,  the  steady-state  probabilities  are  obtained. 

They  are: 

=  sm  -  ssm^  -  samm  +  bam 
2-2 

P0  =  sm  -  s  m  -  samm  +  bam 
2-2 

p£  =  s  m  +  asmm  +  mab 
PQ  =  in^si  +  mmsa  +  blm 

where  in  general  y=l-y  and  s,  m,  a,  and  b  are  the  shift, 
mode  control,  and  preset  input  probabilities .  Now,  the 
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State  assignment 


0  0 
0  1 
1  1 
1  0 

probabilities  of  output  lines  QA  and  QB  can  be  written 

qA  =  PB+?C  =  +  ma 

-2 

qB  =  PC+PD  =  m  s  +  amm  +  mb. 

These  results  can  be  obtained  from  (2.3a)  by  noting 
that  qQ=qA,  q1=qB,  aQ=a,  and  a^=b.  Therefore,  the  results 
obtained  by  the  two  separate  methods  agree . 

Taking  advantage  of  the  iterative  cell  structure  of  a 
sequential  circuit,  we  derived  a  general  expression  for  the 
cell  output  steady-state  probabilities.  Given  the  ceil 
number,  the  steady-state  probability  as  a  function  of  input, 
probabilities  could  be  obtained  directly  from  the  expression. 
Furthermore,  the  derivation  was  directly  from,  the  circuit 
and  did  not  require  knowledge  of  the  state  diagram  of  the 
sequential  circuit.  Also,  the  method  was  straightforward 
and  led  to  a  general  result,  while  the  results  obtained  from 
the  state  diagram  depended  on  specifying  a  fixed  number  of 
cells  (two  in  the  example),  obtaining  the  state  diagram, 
and  finally  obtaining  the  steady-state  probabilities 
from  the  state  diagram.  Thus,  the  method  of  obtaining  output 
probabilities  directly  from  iterative  sequential  circuits 


Table  2.1 

State 

A 

B 

C 

D 
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is  quite  powerful  and  is  advantageous  over  the  previous 
lengthy  method  of  obtaining  the  steady-state  probabilities 
from  the  state  diagram. 

2 . 6  State  Probabilities  Directly  from  Sequential  Circuit 
Using  Regular  Expressions  "  ~ 

In  this  section  regular  expressions  are  derived  directly 
from  sequential  circuits  [4}.  From  the  regular  expressions 
of  the  states,  the  state  probabilities  are  derived  based 
on  the  method  presented  in  Section  2.4. 

A  sequential  circuit  is  constructed  from  unit  delay 
elements  and  logic  gates  [4].  If  flip-flops  are  used 
they  can  be  modelled  as  delay  elements  with  additional 
combinational  logic.  The  sequential  circuit  has  state 
variables  y^ ,y2 , • ♦ • ,ym,  where  each  Vj  is  the  output  of  the 
j  ‘  unit  delay  element.  Following  Bryzowski  [4]  we  first 
consider  circuits  with  single  ipput ,  X,  and  output,  Z. 

The  next  state  and  output  functions  are 

Yj  =  fj (Yi'Y2' ‘ ‘ ‘ ,Ym'X)  (2.40) 

z  =  9(Yiry2’-- (2-41> 

where  fj  and  g  are  3oolean  functions. 

We  shall  be  concerned  with  sequences  that  produce  an 
output  z=l  at  time  t.  Thus  we  give  the  following  definition 
from  [4]  . 

Definition :  An  input  sequence  s  of  length  t>0 

zntKg-izzi  a  point  A  in  a  sequential  circuit  C  started  in 
state  q,  if  and  only  if  the  signal  at  A  is  1  at  time  t. 
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The  sequence  of  zero  length,  X,  energizes  all  points  with 
a  logical  1  signal  at  time  t. 

From  this  definition  the  following  properties  are 
obtained  for  sequential  circuits  [4]: 

1)  The  set  of  sequences  energizing  the  input  lead  is  the 
set  of  all  sequences  ending  in  1  which  is  denoted  by 
the  regular  expression  II.  (By  convention,  assume 
that  X  does  not  energize  the  input  level.) 

2)  Let  the  set  of  sequences  energizing  the  input 

j=l,2,'**,n  of  a  logical  gate  performing  the  Boolean 

function  f,  be  denoted  by  S..  Then  the  set  of  secuences 

3 

energizing  the  output  of  the  gate  is  given  by 
f (S^,S2/ * • * fS  ) .  (The  gate  is  assumed  to  have  no 
delay . ) 

3)  If  R  is  the  set  of  sequences  energizing  the  input  of 

a  unit  delay,  then  its  output  is  energized  by  Ri-:(y(l)) , 
where  5(0) (the  empty  set  of  sequences)  and  5(1)=X. 
Figure  2.13  illustrates  the  above  properties. 
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Following  Brzozowski,  consider  a  general  sequential 
circuit  C  characterized  by  (2.40)  and  (2.41).  Let  the  set 
of  sequences  energizing  the  input  of  the  j  n  delay  of  C 
be  called  the  jfch  delay  (regular)  .4  et ,  and  be  denoted  by 
Rj •  Let  the  set  of  sequences  energizing  the  output  level 
be  called  the  output  (regular)  -4 et  and  be  denoted  by  . 

Then  we  can  state: 

Theorem :  The  delay  and  output  sets  of  a  sequential 

circuit  C  characterized  by  (2.40)  and  (2.41)  must  obey 
the  equations: 

Rj  =  f  j  [Rli  +  '5  (yl(1)  }  '  R2i+5  (y2{1)  ]  '  '  "  'Rmi+C‘  (yra(1)  )  'I1]  (2*42) 

Q  =  g[R1i+6  (yi(l)  )  ,  R2i  +  o(y2(l)). /---,Rmi+5(ym(l))]  (2.43) 

If  in  the  initial  state  all  delay  outputs  are  0 ,  then  a 


simpler  form  of  the  above  equations  results: 


R.  =  f.(R,i,  R_i,*’’,  R  i,  II] 
j  i  i  ^  m 

Q  =  g  [R, i ,  R,i,  * ' * ,  R_i] . 


Note  the  one-to-one  corresoondence  of  the  above 


2.42a) 


(2.43a) 


equations  and  (2.40)  and  (2.41),  when  R.  is  identified 

3 

with  yj ,  Rj,  i  with  y^ ,  II  with  x,  and  O  with  z  [4]  .  These 
equations  (2.42a)  and  (2.43a)  are  called  ^zguial  circuit 
equations  and  our  problem  is  to  solve  these  equations. 
However,  we  are  interested  in  sequences  that  are  accepted 
by  the  circuit. 

Definition :  A  sequential  circuit  C  is  said  to  aoccot 

an  input  sequence  S  of  length  t>0  from  initial  state  q(l) 


1-130 


39 


if  and  only  if,  when  C  is  started  in  q(l)  and  S  is  applied, 
the  output  at  time  t+1  is  2=1.  If  z=l  for  the  initial 
state  q ( 1)  at  time  1,  C  is  said  to  accept  the  set  X 
consisting  of  the  sequence  of  zero  length  [4].  According  to 
the  above  definition  we  obtain  the  following  corollary  [4]: 

Corollary :  If  the  delay  and  output  sets  of  a  sequential 

circuit  are  given  by  (2.42a)  and  (2.43a),  then  the  set  P 
of  sequences  accepted  by  the  circuit  is 


P  =■  q(V  R2,  V  (2-44) 

In  order  to  solve  (2.42a)  and  (2.44)  we  need  to 
introduce  reverse  regular  expressions.  This  is  done  so  that 
the  derivatives  of  the  equations  can  be  taken.  Basically, 
given  a  circuit  C  with  z=l  at  time  t+1,  the  sequences  that 
"could  have  been  applied  to  C  started  in  the  initial  state 
at  some  time  earlier  in  order  to  produce  this  condition" 
are  given  by  the  reverse  regular  expression. 

Reverse  approach  to  the  solution  of  regular  circuit 
equations :  To  solve  the  regular  circuit  equations  we  first 

reverse  them.  Noting  that  r^=R.-  is  used  to  denote  the 


reverse  expression  for 


j  j 

we  obtain 


Tj  =  fj(ir^,  ir2, *  * • ,irm,  II),  j=l,2,‘**,m  (2.45) 

?  =  a(r1,  r2,  *•',  rA ) .  (2.46) 


Taking  the  derivatives  with  respect  to  0  and  I  we  obtain 


D0rj  =  fj(rl'  r 2 '  **•'  V 
Dlrj  "  fj(rl'  r2 '  *•*'  rm'I}  • 


(2.47) 

(2.48) 
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Since  the  derivatives  are  Boolean  functions  of  r]_  r  rg  <  ‘  ‘  '  r  j 
then  all  derivatives  with  respect  to  longer  seauences  are 
Boolean  functions  of  the  r^  [4],  Moreover,  r ^  has  a  finite 
number  of  distinctive  derivatives  and  "since  there  is  a 
finite  number  of  Boolean  functions  of  the  r ^ ,  the  process 
of  constructing  derivatives  will  terminate  without 
difficulty  [ 4 ] . " 

Now,  we  note  that 

D0P  =  a  (D0rl'  D0r 2 '  ' ‘ ‘ '  D0rm) ' 


Dl?  a  (D^,  Dxr2,  •  •  •  ,  DjTJ  . 


2.49) 

2.500 


Therefore,  there  are  a  finite  number  of  derivatives  of 
P  since  there  are  a  finite  number  of  derivatives  of  r  j . 

Once  the  process  of  taking  derivatives  of  P  is  terminated, 
using  the  following  properties  the  reverse  regular  expres¬ 
sion  P  can  be  obtained  [4]. 


D=p  =  U  ak  Dsa  ?, 


P  =  u  a 
k 


v  D  P  +  o  (?) 
K  ak 


(2.51) 

(2.52) 


For  a  single  input  circuit  ak=(0,l)  and  noting  that  s 
represents  a  sequence  of  Is  and  Os,  we  have 


D  P  =  0  D  P  +  1D  P, 
s  s  q  S1 


!  2 . 5  3 ! 


P  =  °  D0  P  +  1  Dl  P  +  6(P) 


)2 .54) 


In  addition  to  the  above  two  expressions,  the  following 
solution  to  the  equation  X=AX-UB ,  where  A, 3,  and  X  are 
regular  expressions,  is  required  [41: 


1-132 


41 


X  =  A  *  B  .  (2.55) 

The  procedure  for  deriving  the  regular  expression  of  the 
states  of  sequential  circuits,  introduced  above,  will  be 
illustrated  by  an  example.  In  the  example,  the  state 
probabilities  will  also  be  derived. 

Example  1:  Consider  the  sequential  circuit  of  Figure 

2.14.  The  J-K  flip-flop  Boolean  excitation  functions  are 

a  ^  ^  y 2  (2.56a) 

K1  -  1  (2.56b) 

J2  =  x  y:  (2 . 56c) 

K2  =  yl  y2  +  x  y2  •  (2.56a) 

A  J-K  flip-flop  implemented  with  a  unit  delay  element  is 
shown  in  Figure  2.15.  The  Boolean  excitation  function  for 
the  input  to  the  delay  element  is 

v '  =  y  J  +  K  v  .  (2.57) 

If  the  J-K  flip-flops  used  to  implement  the  sequential 
circuit  were  replaced  with  the  equivalent  circuit  of  Figure 

2.15,  the  excitation  functions  of  the  delay  element  inputs 
will  be,  by  substitution  of  (2.56)  into  (2.  S'7)  for  each 
delay  element, 

V{  =  Jlyl  +  *lyl  =  ^y2yl  (2.58) 

y  2  =  ^2y  2+^2yl=xy  7  y  2'Uy2  ^y  i+x^  V  ]_  •  (2.59) 

From  the  Boolean  equations  (2.58)  ana  (2.59)  ,  the 
equations  for  the  reverse  regular  expressions  are 
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=  II  &  ir2  &  ir^ 

r2  =  IT  & 

P  =  &  r2  (State  A)  . 


For  simplicity  the  operation  A  &  B  will  be  written 
AB.  Taking  the  derivatives  we  have, 

D0rl  =  r2?l 
D0r2  =  rl 


Now,  P=r^r2,  thus 


DnP  =  D 


)r]  °0r2  =  r2flrl  =  (r2+rl)rl  =  rlr2+r: 


D1P  =  Dlrl  Dlr2  ~  1 


D00P  =  D0(D0P)  =  D0rl  °0r2  +  D0rl  =  r2rlrl+r2rl=r2rl 


D01P  =  * 


D000p  =  D0r 2  D0rl  =  =  rlr2 

D001P  =  * 


D0000?  D0rl  D0r2  rlr2  +  rl  D0- 


D0001P  “  Dlrl  °lr2  ;S,D  X* 


No  new  derivatives  can  be  found.  Therefore,  the  process 
is  terminated.  Now, 

Dooop  =  ODoocop  x  1D0001P  =  0D0P  +  11 

D00?  =  0D000P  +  1D001P  =  OODo?"L°1- 
DqP  =  ODqqP  +  1D01?  =  000DqPx001I . 

3v  noting  that  the  solution  of  X=AX+B  is  X=A*B  we  have 
DQ?  =  (000) *001  I . 
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P  =  ODq?  +  1DXP  =  0(000)*001I  +  II. 


Reversing  P  we  obtain  the  regular  expression  for  state  A. 
P  =  II  (00(000) *0+X)  . 

However,  we  note  that  (PO) *P=?  (QP) *  and  A+PP*=P*.  Thus, 

P  =  II  (X  +  000  (000) *)  =  11  (000)* 

According  to  Section  2.4,  P  is  in  synchronized  form 
and  therefore  the  steady-state  probability  of  P  can  be 
written  directly  from  the  regular  expression 

_ _  i _ _  .  ,  v  1 


Prob  (State  A)  = 


l-(l-X)3  X2-3x+3 


Note  that  the  regular  expression  derived  directly 
from  the  circuit,  by  simple  manipulations,  was  put  into 
synchronized  form.  This  property  is  also  supported  by  the 
examples  to  follow.  Hence,  the  method  of  obtaining  regular 
expressions  from  sequential  circuits  is  a  powerful  procedur 
for  obtaining  synchronized  regular  expressions  suitable  for 
•the  derivation  of  steady-state  probabilities. 

The  following  example  illustrates  how  synchronized 
regular  expressions  can  be  found  for  multiple  input  devices 
From  the  regular  expression,  the  steady-state  probability 
can  be  found. 

Example  2:  Consider  a  J-X  flip-flop  shown  in  Figure 
2.15.  The  input  alphabet  A_,=  [aQ,a^,a7,a-,]  is  defined  as 


a0  =  ° 

( J=0  , 

K=0 ) 

3^=1 

(J=l, 

K=0) 

a2  =  2 

(J=0  , 

K=l) 

a,  =  3 

(J=l , 

K=  1 ) 
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Now,  noting  that 

yD  =  Jy  +  Ky  , 

we  can  write  for  the  regular  expression  R  of  the  delay 
element  input,  y  , 

R  =  1(1+3)  &  rT  +  1(2+3)  &  Ri 

where  i=(0+l+2+3)  and  I=i*.  Writing  the  reverse  regular 
expression  we  obtain 

r=(l+3)I  &  ir  +  (2+3)1  &  ir  . 


As  in  the  previous  example  we  use  the  concept  of  the  deriva¬ 
tive  and  the  relationships  between  multiple  derivatives 
given  by  (2.51)  and  (2.52)  to  solve  the  above  equation. 
Therefore,  taking  the  derivatives  of  r  until  the  derivatives 
do  not  repeat  we  obtain. 


Now,  from  (2.51) , 


D3r  =  0D3Or  +  lD31r  +  2D32r  "  3D33r 
D^r  =  OD^r  +  21  +  3r 

D3r  =  0* (21  +  3r)  . 
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Also , 

r  =  ODqT  +  lD^r  +  2&2Z  +  3D^r 

r  =  Or  +  II  +  $  +  30*21  +  30*3r 

r  =  (0  +  30*3) r  +  (1  +  30*2)  I 

r  =  (0  +  30*3) *  (1  +  30*2)  I . 

Reversing  the  above  expression 

R  =  1(1  +  20*3)  (0  +  30*3)*.  (2.60) 


The  above  expression  is  the  regular  expression  of  a 
J-K  flip-flop  expressed  in  synchronized  form.  The  steady- 
state  output  probability  can  be  found  from  the  synchronized 
regular  expression  by  noting  that 

P(0)  =  (1-j)  (1-k) 

P  (1)  =  j  (1-k) 

P (2)  =  (l-j)k 
P ( 3 )  =  jk, 


where  j  and  k  are  the  J  and  K  input  probabilities,  respec¬ 
tively.  Thus  the  output  probability  car.  be  written  from 


(2.60)  as 

p=  [  j  ( l-k)  h-  ( i- j )  ^Ir7Trjfn^k7jk 3 


i- [  (i- j : 


The  expression  above  can  be  simplified  and  the  final  result 
is  given  by 


P 


i 


The  above  result  is  consistent  with  the  result  obtained 
through  steady-state  Markov  analyses  (Section  2.2). 
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Note  that  again  the  regular  expression  derived  from  the 
circuit  was  in  synchronized  form.  This  property  is 
supported  by  the  next  example. 

Example  3 :  Consider  a  sequential  circuit  with  state 
diagram  given  in  Figure  2.16.  The  Boolean  excitation 
functions  of  the  delay  elements  used  to  implement  the 
sequential  circuit  are  given  by 

D  - 

yl  =  xy2yl  +  Xyl  +  y2y 

Y2D  =  xy2  +'yxY2  +  yly 2 ' 

State  y^  y2 

A  0  0 

B  0  1 

C  11 

D  10 

Figure  2.16  State  diagram 

Proceeding  as  in  the  previous  examples  we  derived  the 
regular  expression  directly  from  the  circuit.  The  regular 
expression  for  state  B  is  thus, 

Rb  =  II  [010 (i0) *0] *100*. 

Noting  that  S3  =  1  [ 010  ( iO ) *0 ] *1 0  is  the  synchronization 
sequence  for  this  state,  we  can  write 
Sc  =  II  [010  (iO) *0] *101 
SD  =  1  [010  (iO ' *0] *1010 
S  =  1  [010  (iO) *0] *1011 . 

A 
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Also,  from  the  state  diagram  the  returning  sequences 
for  each  state  are 

TA  " 

t3  =  0* 

Tc  =  (0i)  * 
td  =  (10) *. 

ThUS  , 

Ra  =  II [010  (i0) *10111* 

Rb  =  II  [010 (iO) *0] *100* 

Rc  =  II [010 fiO) *03*101  (0i) * 

Rd  =  II  [010  (iO) *0] *1010  (iO) *. 

We  can  obtain  the  steady-state  state  probabilities  from 
the  above  synchronized  regular  expressions.  For  state  B 
we  have 

1  ,  1  l-o 

-B~?.  p(l-p)J  P(1-P>  1  — ( 1— p)  . 2  ' 

1  1-Kl-p)  F  ~3p~3 

where  p  is  the  probability  that  the  input  is  a  one.  Again 

the  result  is  consistent  with  the  result  obtained  through 

Markov  steady-state  analysis. 

2 . 7  Comparison  of  Methods 

In  this  chapter  methods  for  obtaining  output  probabili¬ 
ties  as  a  function  of  input  probabilities  for  sequential 
circuits  were  investigated.  When  the  state  diagram  of  the 
sequential  circuit  is  available,  we  showed  that  using 
Markov  steady-state  analysis  a  system  of  equations  for  the 
state  probabilities  can  be  directly  obtained  from  the 
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state  diagram.  Solution  of  the  system  of  equations,  however, 
for  complex  state  diagrams  is  difficult  and  not  straight¬ 
forward.  Situations  exist,  however,  where  general 
expressions  for  state  probabilities  of  iterative  type 
sequential  circuits  can  be  derived  as  was  shown  for  a  general 
n-bit  programmable  counter.  A  more  efficient  method  for 
obtaining  state  and  output  probabilities  was  to  consider  the 
synchronized  regular  expression  from  which  the  probability 
equation  can  be  directly  obtained.  Synchronized  regular 
expressions,  however,  are  difficult  to  obtain  from  the 
state  diagram  of  sequential  circuits.  This  is  because  the 
synchronizing  sequences  of  the  circuit  must  be  derived  and 
the  resulting  regular  expression  must  be  unique. 

The  above  methods,  however,  are  independent  of  circuit 
implementation  and  are  derived  from  the  state  diagram  or 
verbal  description  of  the  sequential  circuit  operation. 
Therefore,  we  examined  methods  in  which  the  state  and  output 
probabilities  are  derived  directly  from  the  circuit.  The 
first  method  involved  taking  advantage  of  the  iterative 
structure  of  some  sequential  circuits.  Problems  were 
encountered,  however,  due  to  the  statistical  dependence 
between  internal  signal  lines  and  the  method  was  limited  to 
certain  iterative  structures.  A  mere  general  method  for 
deriving  state  and  output  probabilities  is  to  derive  the 
synchronized  regular  expression  directly  from  the  circuit 
from  which  the  probabilities  can  be  found.  The  method  has 
the  potential  cf  being  automated;  however,  mere  research 
is  required. 


The  advantage  of  the  methods  for  obtaining  state  and 
output  probabilities  directly  from  the  sequential  circuit 
is  that  faults  can  be  conveniently  inserted  into  the  circuit 
and  the  corresponding  change  in  output  probability  can  be 
found.  However,  when  considering  modular  sequential  circuits 
where  faults  are  limited  to  single  stuck-at  faults  at  the 
inputs  to  the  module,  the  Markov  steady-state  analysis  or 
the  regular  expression  description  of  the  sequential  circuit 
can  be  used  since  the  internal  structure  of  the  sequential 
circuit  is  unimportant  in  this  case. 
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3  ANALYSIS  OF  A  FOUR-STATE  SEQUENTIAL  CIRCUIT 

We  can  now  apply  the  methods  of  Chapter  2  to  the 
analysis  of  a  four-state  sequential  circuit.  In  this 
analysis  we  will  demonstrate  the  effectiveness  of  the  BIT 
strategy,  outlined  in  Ch'pter  1,  for  testing  the  circuit. 
First,  the  state  probabilities  are  derived  in  terms  of  the 
input  probability  distribution.  Secondly,  faults  are 
inserted  into  the  circuit  and  the  corresponding  changes  in 
state  diagram  and  state  probabilities  are  tabulated.  Next, 
using  the  tabulated  faulty  circuit  state  probabilities,  the 
fault  density  function  for  the  given  fault  set  is  obtained. 
From  this  function,  the  escape  probability  is  calculated 
for  each  state  and  plotted  as  a  function  of  the  input 
probability  distribution.  Finally,  a  discussion  of  the 
results  and  the  general  behavior  of  sequential  circuits 
under  faults  is  presented. 

A  simple  single  input  four-state  sequential  circuit 
will  be  analyzed  in  order  to  demonstrate  the  effectiveness 
of  the  referenceless  random  testing  of  the  circuit.  The 
machine  in  question  is  described  by  the  state  diagram 
given  in  Figure  3.1.  We  will  be  concerned  with  the 
monitoring  of  the  statistics  of  the  states  of  the  machine 
under  random  inputs.  Therefore,  the  outputs  of  the  machine 
are  simply  state  decoders. 
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Figure  3.1  State  diagram 


An  implementation  of  the  machine  using  J-K  flip-flops 
shown  in  Figure  3.2.  Table  3.1  lists  the  Boolean 
lationships  of  the  excitation  circuit  for  faulty  circuits 


Figure  3.2  Circuit  diagrams 


Table  3.1  (continued) 


From  the  state  diagram,  we  can  write  down  the  system  of 


equations  for  the  steady-state  probabilities: 
PA  "  PPA  +  ?PC 

PB  =  (l-p)PA  +  (l-?)Pb  -  u-p>pd 
Pc  =  PPB  +  PPD 
PD  -  (1-P)PC 
PA  +  PB  +  PC  +  ?D  “  1 


(3.1a: 
( 3 . lb) 
(3.1c) 


(3.1c) 


(3 . le) 


Solving  these  equations  for  the  state  probabilities  we  obta: 


p 

'  A 

D 


2 

P 

(1-p)  (1-p-p3) 


(3.2  a-d)  . 
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Pc  =  p(l-p)  (3.2c) 

PD  =  (l-p)2P  (3. 2d) 

We  will  now  examine  how  faults  modeled  as  simple  stuck-at- 
zero  or  -one  faults  change  and  modify  the  state  diagram,  and 
hence  the  steady  state  probabilities  of  the  circuit.  The 
results  corresponding  to  various  faulty  configurations  are 
tabulated  in  Table  3.1.  At  this  point  in  the  development 
the  objective  is  to  exemplify;  for  that  reason  a  very 
straightforward  fault  model  is  used.  A  more  realistic  and 
thorough  fault  model  is  developed  ir.  Chapter  4. 

The  manner  in  which  the  state  diagram  is  modified 
differs  fox  each  faulty  condition.  We  observe  from  Table  3.1 
that  some  faults  (J-j_  s-a-0,  J2  s-a-0,  and  s-a-0)  cause 
some  states  to  be  absorbing.  In  some  cases  (L^  s-a-1, 

K-^  s-a-0)  ,  the  number  of  states  of  the  machine  is  reduced. 
However,  some  faults  cause  only  the  transition  between  states 
to  be  effected  (J^  s-a-0,  J2  s-a-1,  L1  s-a-0,  L2  s-a-0). 

This  category  of  faults  may  be  the  most  difficult  to  detect. 

Statistical  Testinc;  Considering  the  fault  set  of 
Table  3.1,  we  next  examine  the  efficiency  of  referenceless 
random  testing  in  detecting  these  faults.  The  test  is 
performed  by  applying  a  number  of  random  inputs  to  the 
circuit  and  counting  the  number  of  occurrences  of  a  logical 
one  at  the  output.  This  count  is  then  compared  to  the 
probability  of  the  fault-free  output  and  the  circuit  passes 
the  test  if  its  count,  Zc ,  satisfied  the  condition 
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Zj+--  w^ere  zj  1S  the  fault-free  -probability  and  £ 
is  the  test  stringency,  and  N  is  the  test  length.  In  order 
to  determine  the  efficiency  of  the  test  we  must  calculate 
the  escape  probability.  The  probability  of  escape  can  be 
obtained  by  (3.3)  also  known  in  statistics  as  the  error 
of  the  second  kind. 


o 

*  esc 


N (z^+e)  r 

f  I 

K=N  (z  .-e)  •' 
3  o 


(tj) Zk  (l-z)N"K  *  (z)  dz 

K 


(3.3) 


In  the  above  equation  <i>  { z)  is  the  density  of  faulty  circuits 
with  output  probability  z  and  N  is  the  test  length.  Since 
the  fault-free  output  probability  Zj  is  a  function  of  the 
input  probability  x,  the  escape  probability  can  be  obtained 
as  a  function  of  input  probability.  We  must,  however,  first 
obtain  the  fault  density  function  <b  ( z)  . 

Since  6 ( z)  is  a  probability  function  we  must  statis¬ 
tically  model  the  faults.  For  convenience  we  will  assume 
that  all  faults  in  the  fault  set  of  Table  3.1  a^e  equa- 
probable.  The  fault  density  function  is  thus 


d  (z) 


£ [z-fi (x)  i 


(3.4) 


where  M  is  the  number  of  faults,  £(z)  is  the  impulse 
function  defined  by  (3.5)  and  f^(x)  is  the  function  relating 
the  output  to  input  probability  for  faulty  circuit  i. 

1  if  z  =  0 

6 ( z )  =  (3.5) 

0  i  f  z  d  o 
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Note  that  we  can  define  the  output  z  to  be  such  that  it  is 
a  logical  one  on  the  occurrence  of  a  specified  state. 
Moreover,  we  will  be  concerned  with  the  monitoring  of  the 
states  of  the  machine. 

A  three-dimensional  plot  of  the  number  of  faulty 
circuits  with  output  probability  z  such  that  z-s.<_zf<z+z 
with  fixed  input  probability  is  shown  in  Figure  3.3.  This 
plot  is  for  state  A  with  £=0.05. 

Results  and  test  efficiency:  From  (3.3)  and  knowledge 
of  the  functions  f^(x)  obtained  from  Table  3.1  we  can 
calculate  the  probability  of  escape  for  a  given  experiment 
length  and  test  stringency.  To  simplify  the  calculations  we 
make  use  of  the  approximation 


(jj)  Pk(l-P)N~k 


/2  NP(l-P) 


-  (K-NP)  V2NP  (1-?) 


(3.6) 


which  is  valid  when  N  is  large,  and  NP{1-?)>>1.  The 
probability  of  escape  of  state  3  versus  the  input  proba¬ 
bility  for  three  experiments  was  obtained  and  is  shown  in 
Figure  3.4.  We  observe  that  by  increasing  the  test  length 
the  probability  of  escape  is  not  decreased  by  an  appreciable 
amount.  Tightening  the  test  stringency,  however,  decreases 
the  probability  of  escape  significantly.  In  addition,  we 
observe  that  the  best  region  to  test  the  circuit,  in  an 
off-line  situation,  is  to  set  the  input  probability  in 
the  region  0.4  <_  x  <_  0.5. 
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We  must  keep  in  mind  that  the  probability  of  false 
alarm  as  an  upper  bound  is  related  to  the  test  length  and 
test  stringency,  by  the  relationship  [ 8  ] , 

Prob  (FA)  =  Erfc  (e/2N)  (3.7) 

which  is  plotted  in  Figure  3.5.  We  see  that  increasing  the 
test  length  makes  the  test  more  efficient  by  reducing  be . h 
the  false  alarm  rate  and  escape  probability.  Tightening 
the  test  stringency,  however,  increases  the  false  alarm 
rate  although  it  significantly  decreases  the  escape  rate. 
Therefore,  a  compromise  must  be  made  by  the  test  designer 
regarding  the  selection  of  the  test  stringency. 


PROB  (FA) 


Fiaure  3.5  Probability  of  false  alarm 
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To  determine  which  states  to  monitor  in  order  to 
efficiently  fail  faulty  circuits  over  a  wide  input  proba¬ 
bility  range,  we  examine  the  probability  of  escape  vs.  the 
input  probability  for  the  four  states  of  the  machine  shown 
in  Figure  3.6.  These  results  are  for  experiments  with 
a  test  length  N=10,000  and  test  stringency  £  =  0.01. 

From  Figures  3.6a  and  b,  we  see  that  if  both  states  A 
and  B  are  monitored  the  escape  probability  will  be  quite  low 
over  the  range  of  input  probabilities  0.3  £  x  £  0.6. 

While  for  X=0.5  the  escape  probability  of  state  A  increases 
to  0.1,  the  escape  probability  of  state  B  remains  quite  low. 
We  may  say  that  these  two  states  "compensate"  each  other. 
Furthermore,  no  gain  is  achieved  by  monitoring  states 
C  and  D  if  states  A  and  B  are  monitored. 

Conclusions :  These  results  show  that  in  order  to 

determine  the  best  test  procedure,  1  .  e.  .  ,  the  determination 
of  which  states  to  monitor  and  the  specification  of  test 
length  and  test  stringency,  an  accurate  method  must  be 
developed  for  the  calculation  of  the  probability  of  escape. 
Especially  in  an  on-line  environment,  where  the  input 
statistics  are  uncontrollable,  accurate  knowledge  of  the 
probability  of  escape  as  a  function  of  the  input 
probability  allows  us  to  determine  the  efficiency  of  the 
testing  procedure  for  the  given  on-line  input  statistic. 
Moreover,  these  results  show  that  statistical  fault  mor.itorin 
is  quite  efficient  in  detecting  oossible  faults  in  the  four 
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state  machine  examined.  However,  the  derivation  of  a 
measure  for  the  efficiency  of  the  test  proved  to  be  quite 
vigorous.  It  was  observed  that  faults  may  change  the  state 
diagram  of  the  machine  quite  arbitrarily.  Furthermore, 
relating  the  output  statistics  to  the  input  statistics  for 
each  faulty  circuit  is  difficult.  This  is  because  'a  state 
diagram  must  be  constructed  from  each  faulty  circuit  —  a 
lengthy  process  —  and  from  the  state  diagram  a  system  of 
equations  must  be  derived  from  which  the  steady-state 
probabilities  are  obtained.  As  was  described  in  section 
2.4.2  the  derivation  of  the  regular  expression  from  a 
sequential  circuit  and  the  consequent  calculation  of  the 
steady-state  probability  from  the  regular  expression 
may  provide  an  efficient  method  for  obtaining  the  state 
probabilities  of  faulty  circuits.  Nevertheless  the  procedure 
is  still  lengthy.  In  the  next  chapter,  therefore,  we  will 
deal  with  a  statistical  fault  model  that  reduces  the 
computations  and  yet  provides  good  fault  coverage  for 
sequential  integrated  circuits. 
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4  statistical  pin-fault  model 

4 . 1  Introduction 

Primary  to  the  evaluation  of  the  probability  of  escape 
and  therefore  to  the  determination  of  effectiveness  of  a 
given  test  is  the  derivation  of  the  fault  density  function. 
Specifically  the  probability  of  escape  is  related  to  the 
fault  density  function  ®(z)  according  to  the  expression  [8] 

Prob  (Pass  Test/faulty)  = 

N(Z.+e) 

k=N  (-Z  .  -e) 

]  o 

where  N  and  e  are  the  test  length  and  stringency  respectively. 
The  function  $(z)  which  depends  on  the  input  statistics  is 
derived  from  a  given  circuit  under  a  specified  fault  model. 

In  Section  4.2  we  develop  a  statistical  fault  model  under 
the  pin-fault  assumption  proposed  bv  Ketelsen  [6].  Section 
4.3  shows  how  the  fault  density  function  for  a  module  is 
obtained  from  the  statistical  fault  model  and  knowledge  of 
the  output  probability  expression.  An  algorithm  for 
computing  the  fault  density  function  is  given  in  Section  4.4. 
This  algorithm  is  used  to  compute  the  escape  probabilities 
of  two  integrated  sequential  circuits  treated  in  Chapter  5. 

4 . 2  Statistical  Pin-Fault  Model 
An  appropriate  fault  model  for  fielded  digital  elec¬ 
tronic  equipment  is  the  pin-fault  model  proposed  and  partly 


(£>  ZK  (l-Z)N'"Kt  (z)dz 
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justified  by  Ketelson  [6].  This  model  incorporates  faults 
occurring  due  to,  for  example,  "lead  bond"  failures, 
failures  of  input  or  output  transistors,  or  failures  due 
to  improper  connection  of  the  package  pins  to  the  silicon 
chip.  According  to  this  model,  the  input  and  output  pins 
of  integrated  circuits  experience  stuck-at-one  or  stuck-at- 
zero  faults. 

In  this  section  a  statistical  pin-fault  model  will  be 
developed  for  digital  synchronous  sequential  circuits. 

The  abstract  model  of  a  synchronous  sequential  circuit  is 
shown  in  Figure  4.1.  In  this  mode  inputs  occur  at  discrete 
intervals  of  time  and  each  application  of  inputs  results 
in,  at  most,  one  state  transition.  The  delay  elements  are 
implemented  using  suitable  flip-flops  (master-slave  or 
edge  triggered)  to  insure  proper  synchronous  operation  [6], 

We  will  examine  the  model  in  order  to  determine  in 
an  abstract  way  the  effect  of  various  faults  on  the 
statistics  of  the  outputs.  Referring  to  Figure  4.1,  stuck 
at  faults  at  the  outputs,  y ^ ,  of  the  delay  elements  cause 
the  number  of  states  to  decrease.  This  causes  significant 
deviation  of  the  faulty  circuit  statistic  from  the  fault- 
free  statistic,  particularly  if  the  outputs  are  the  internal 
states  of  the  machine.  This  deviation  of  output  statistics 
due  to  faults  on  the  delay  element  outputs  is  thus 
immediately  detectable.  The  same  arguments  can  be  stated 


for  faults  on  the  D-type  delay  element  input  lines. 


If  the 
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delav  elements  were  implemented  with  JK  flip-flops 
the  nature  of  the  effects  of  faults  on  the  input  lines  of 
the  delay  elements  is  more  complicated.  Faults  on  the 
inputs  of  set-reset  flip-flops,  however,  cause  the  outputs 
to  be  stuck-at-one  or  stuck-at-zero  and  thus  are  detectible 
as  in  the  case  of  D-tvpe  flip-flops. 

Unlike  the  faults  mentioned  above,  faults  occurring 
on  the  input  lines,  X,  ,  to  the  seauencial  circuit  mav 

A. 

cause  minor  changes  in  the  output  statistics.  For  example, 

a  failure  mav  change  the  transition  from  state  Q.  to  Q. 

i  3 

under  input  (0  £  A^  <_  2^-1)  .  According  to  Lose  [8]  , 

"these  failure  will  be  far  more  difficult  to  detect  because 
their  effect  on  the  system  operation  is  somewhat  limited 
(in  a  statistical  sense)."  Faults  occurring  in  the 
combinational  logic  also  may  cause  minor  changes  in  output 
statistics . 

Since,  according  to  the  above  discussion,  faults 
occurring  at  the  input  pins  to  the  sequential  circuit 
dominate  other  faults,  we  propose  a  fault  model  that 
considers  faults  to  occur  only  at  the  incur  pins  of  the 
sequential  circuit.  Hence,  if  the  test  strategy  is  capable 
of  detecting  faults  at  the  input  pins,  faults  at  the  delay 
elements  and  output  pins  are  also  detected.  This  fault 
model  is  known  as  the  pin-package  fault  model.  We  note 
that  we  exclude  faults  occurring  in  the  combinational 
logic  since  we  are  dealing  with  fielded  integrated  circuits 
and,  therefore,  faults  occurring  in  the  combinational  logic 
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have  a  very  low  probability  of  occurrence  compared  to  faults 
at  the  input  pins  (-4.2..  ,  for  a  silicon  chip  the  probability 
that  a  single  gate  function  fails  is  very  lew  for  fielded 
integrated  circuits) .  However,  an  advantage  of  statistical 
testing  of  the  outputs  is  that,  although  knowledge  of  the 
effect  of  faults  in  the  combinational  circuit  on  the  output 
is  difficult  to  analyse,  it  can  be  shown  that  most  faults 
cause  deviations  from  the  fault-free  statistics  and  are  thus 
detectible  (see  Chapter  3) .  The  exclusion  of  the  analyses 
of  these  faults  in  the  fault  model  greatly  simplifies  the 
analyses  of  the  problem  and  makes  the  systematic  analyses 
of  the  test  strategy  possible  while  at  the  same  time  a  large 
percentage  of  the  high  probability  faults  are  taken  into 
account . 

In  our  discussion  we  will  be  concerned  with  intecratec 
circuit  implementations  of  the  model  of  Figure  4.1.  In 
this  case  we  have  access  only  to  the  input  and  output  pins 
of  the  circuit.  Thus,  in  the  pin-fault  model  faults  in 
the  form  of  stuck-at-one  or  stuck-at-zerc  faults  occur  only 
on  the  input  and  output  pins.  We  place  no  restriction  on 
the  number  of  pins  that  can  be  at  fault.  As  was  discussed 
above,  this  model  provides  good  fault  coverage. 

The  total  number  of  faulty  input  combinations  assuming 
stuck-at-one  and  stuck-at-zero  faults  at  the  pins  of  an 
input  circuit  is 
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If  we  let  k  denote  the  number  of  pins  at  fault,  then  the 
number  of  possible  combinations  of  k  stuck-at  faults  is 


We  assign  a  probability  to  the  event 
at  fault  simultaneously.  We  have  then, 


that  k  pins 
from  (4.2) , 


(4  .2) 

are 


T 


l 

K=1 


^  Pk  “  1- 


(4.3) 


It  is  reasonable  to  assume  that  the  probability  of 
occurrence  of  multiple  pin  faults  is  a  decreasing  function 
of  the  number  of  faulty  pins.  In  other  words,  decreases 
as  k  is  increased.  In  this  study  we  assume  that 


Thus,  in  the  statistical  fault  model  considered,  the 
probability  of  faults  at  the  input  pins  decreases  expo¬ 
nentially  as  the  number  of  simultaneous  faulty  pins 
increases.  The  exponent  coefficient  a  corresponding  to 
the  number  of  input  pins  L  is  listed  in  '’’able  4.1. 

Let  the  variable  f  be  an  integer  defined  in  the  inter¬ 
val  1  <_  f  <_  3L-1.  Then  each  integer  f  defines  a  specific 
fault  configuration  with  a  corresponding  number  K  simul¬ 
taneous  pin  faults.  We  thus  define  the  function  g(f)  as 
the  ptc  6 ability  o  i.  the  ocouttenoe  c  j  the  is.uttu  ccntigau.- 
t-ion  f. 

This  function  will  be  used  in  the  derivation  of  the 
fault  density  function  in  the  nex*-  section.  The  variable 
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Table  4.1  a  parameter  (see 

program.  ALPHA  in  appendix) 

Number  of 
input  pins 

a 

1 

0.6931472 

2 

1.574520 

3 

2 . 040524 

4 

2.353062 

5 

2.598983 

! 

6 

2.793101 

7 

2.955652 

8 

3 .095474 

9 

3 .218129 

10 

3.32738 

11 

3.425883 

12 

3.515547 

1 

13 

!  3.597334 

i 

14 

;  3.673863 

15 

3.744524 

16 

3.810523 

4 . 3  Derivation  of  ®(z) 

In  this  section  the  fault  density  function  will  be 
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derived  for  a  synchronous  sequential  integrated  circuit 
using  the  statistical  pin  fault  model.  Let  the  function 
relating  the  output  probabilities  to  the  input  probabilities 
be  Z=T  (Xl,x2,- --,xL) .  Under  the  pin  fault  assumption  only 
stuck-at-zero  or  -one  faults  occur  at  the  input  pins. 

Thus,  when  input  line  x^  ,  i=l,2,-*-  is  at  fault  the  faulty 
output  statistic  is  either  Z^=T (x^ , X2 , • • • x^  ^,0,**-XjJ  or 
Zf=T  (Xi ,x2 / • ' *x .  i» 1. 0 , • * *xL)  depending  on  whether  the 
pin  is  stuck-at-zero  or  stuck-at-one . 

Now,  as  before,  let  the  integer  f  be  in  the  region 
1  £  f  £  3^-1,  then  each  integer  f  defines  a  faulty 
configuration  and,  as  will  be  shown  in  the  next  section, 
the  correspondina  faulty  output  statistic,  Z f,  as  a  functioh 
of  the  integer  f  assuming  fixed  input  statistics  can  be 
expressed  as 

Zf  =  T ( f ) 

where  T(f)  is  related  to  T (x, ,x0 , • • * ,xT )  the  fault-free 

-L  L  Li 

transfer  function. 

The  fault  density  function  ®(z)  is  the  density  of 
faulty  circuits  that  have  output  statistic  z.  We  can  thus 
arrive  at  an  expression  for  ®(z)  in  terms  of  the  functions 
Z*=T(f)  and  g(f) .  This  expression  is  given  in  (4.10' . 
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The  following  section  gives  an  algorithm  for  computing 
<Mz)  ,  .  .  ,  evaluating  (4.10)  on  a  digital  computer. 

This  procedure  is  then  used  to  accurately  calculate  the 
escape  probability  for  digital  sequential  integrated 
circuits  in  a  defined  test. 


4 . 4  Algorithm  for  the  Calculation  of  o(z) 

The  mathematical  discussion  in  Section  4.3  suggests 
an  algorithm  for  the  computation  of  the  fault  densitv 
function.  We  shall  attempt  at  first  to  develop  a  method 
for  obtaining  a  fault  configuration  (ordered  in  increasing 
number  of  faulty  pins) . 

The  total  number  of  faulty  configurations  is  N=3n?-i 
where  rp  is  the  number  of  input  pins.  'We  define  the  integer 
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f  in  the  region  0  <_  f  <_  N .  Expanding  F  in  powers  of  3 
we  obtain 


f  =  a^+3a2+3  a^+' 


■  +  3ct 


np-1 


nD 


(4.12) 


where  a^=0  ,  1,  or  2.  Thus,  each  integer  f  is  defined  by 


a  set  [a,  ,a0,  •  •  *  ,ct  ) 
l  2  np 


We  shall  define  a^=2  to  mean  that 


pin  i  is  fault-free  and  a^=0  or  1  to  mean  pin  i  is  stuck- 
at-zero  or  -one,  respectively.  Thus,  if  np=4,  the  set 
[2102]  representing  f=2+3+0+27x2=59  means  pin  numbers  one 
and  four  are  fault-free,  pin  number  two  is  stuck-at-one 
and  pin  number  three  is  stuck-at-zero . 

We  can  obtain  the  faulty  output  statistic  Z f  corres¬ 
ponding  to  a  faulty  configuration  , a 2  ,  *  *  *  ]  ky 

defining  coefficients  8^  according  to  (4.13)  and  (4.14) 
and  relating  the  coefficients  8^  to  ct-  . 


Zf=T(S^x^,  $2x2  '  ’  *  *  ,  6j.xi  '  *  *  *  ,  - 


R  x  ) 
no  no' 


(4.13) 


x^  Pin  i  is  fault  free  (a. =2) 


Vi  -  < 


0  Pin  i  is  s-a-0 


,=0) 


(4.14) 


1  Pin  i  is  s-a-1  (a.*! 


From.  (4.14)  we  observe  that 


0 


a.=0 


Si  -  1  VXi  a±-l 

1 


a  .  =2 
1 


We  thus  obtain  a  relationship  between 
can  be  expressed  as 


(4.15) 


and  which 


Sisff1+  v!i] 


(4 . 16) 
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which  satisfies  (4.15) 
we  obtain  the  equation 

ai 

a  -  - 

“i  “  2 


x .  -2 

if  A.  =  -  .  Substituting 

i  xi 


[1  + 


(ai-2) 


) 


(4.17) 


relating  8^  to  a^. 

We  are  now  in  a  position  to  present  the  algorithm  for 
computing  <j>(z).  The  first  step  is  to  generate  the 
coefficients  cu.  Furthermore,  these  coefficients  must  be 
generated  in  the  order  of  increasing  number  of  faulty  pins. 

For  each  set  of  coefficients  there  is  a  corresponding 

“  oc  1c 

probability  defined  by  the  relation  P^=e  where  k  is 
the  number  of  faulty  pins  in  the  faulty  configuration 
defined  by  the  coefficients.  Thus,  as  the  coefficients  are 
generated,  the  probability  density  function  q(f)  of  faulty 
configurations  f  is  also  generated.  From  (4.17)  the 
coefficients  3^  are  derived.  Using  these  coefficients,  the 
output  probability  2-  corresponding  to  the  faulty  config¬ 
uration  f  is  obtained  through  (4.13).  Finally,  as  the 
functions  c(f)  and  Ze=T(f)  are  obtained  throuc'n  this 

"  A. 

procedure,  the  fault  density  function  is  calculated  using 
relationship  (4.10). 

The  above  algorithm  has  been  implemented  in  FORTRAN 
and  is  listed  in  Appendix  A. 

We  have  developed  a  fault  model  which  is  computationally 
feasible  and  which  has  a  reasonable  coveraae  of  high  prob¬ 
ability  faults.  In  addition,  we  have  shown  how  the  fault 
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density  function  $(z)  can  be  derived  using  this  model 
The  final  step  of  using  <j>  to  compute  the  probability 
escape  is  treated  in  the  next  chapter. 
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5  COMPUTATIONAL  RESULTS  AND  SIMULATION 

5 . 1  Introduction 
In  this  chapter  the  probability  of  escape  is  calculated 
and  results  are  presented  for  two  synchronous  sequential 
integrated  circuits.  The  computations  are  done  using  the 
algorithm  described  in  the  previous  chapter.  The  results 
are  verified  by  computer  simulations  of  the  devices  under 
various  faulty  configurations.  In  the  simulations,  pseudo¬ 
random  inputs  are  applied  and  the  statistics  of  the 
monitored  outputs  of  the  device  are  collected.  If  the  output 
statistics  are  within  the  specified  ranae  of  the  fault-free 
statistics  the  devices  pass  the  test.  Thus,  the  criterion 
for  passing  a  simulated  test  can  be  summarized  by 

N  (Z.-e)  <  Z  <  N  ( Z • +e ) 
x  —  c  —  1 

where  Z  is  the  number  of  occurrences  of  a  one  at  the  outout 
c 

and  N,  c ,  and  z ^  are  the  number  of  simulations  (test  length) , 
test  stringency,  and  fault-free  statistic,  respectively. 

It  may  be  required  that  all  outputs  satisfy  the  above 
condition . 

5 . 2  Escape  Probability  of  a  Two-Bit  Right-Shift  Parallel- 
Load*  Shift  Register 

The  logic  diagram  of  a  two-bit  right-shift,  parallel¬ 
load  shift  register  is  shown  in  Figure  5.1.  The  relation¬ 
ships  between  output  and  input  probabilities  (steady-state) 
are  given  in  Table  5.1.  Using  these  relationships  and  the 
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Figure  5.1  Logic  diagram  of  shift  register 


Table  5.1  State  probabilities 


State  (QBQ^) 

State  Probability  Expression* 

A  (00) 

--2  -  -  -- 

sm  -  ssm  -  samm  +  bam 

2-2 

B  (01) 

sm  -  s  m  -  samm  +  bam 

2-2 

C  (11) 

s  m  +  asmm  +  mab 

D  (10) 

-2  -  -  -  ,  ,  - 

m  ss  mmsa  -  cam 

statistical  pin-fault  model,  the  probability  of  escape  was 
obtained  for  each  output.  These  results  are  based  on 
specific  input  probabilities  given  in  Table  5.2  and  a  test 
length  N=10,000  and  test  stringency  e=0.01.  In  obtaining 
the  results,  the  statistics  of  one  pin  was  varied  between 
zero  and  one  while  the  statistics  of  the  remaininc  pins 
were  held  constant.  Figures  5.2  through  5.5  show  plots  of 


the  results  for  each  state. 
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Table  5.2  Input  probabilities 


Input  Pin 

Probabilitv 

Mode  (M) 

00 

o 

Serial  in  (S) 

0.5 

Parallel  in  (A) 

0.3 

Parallel  in  (B) 

0.6 

These  plots  show  that  very  good  testing  regions  exist 
where  the  probability  of  escape  is  extremelv  low.  For 
instance,  with  the  input  statistics  given  in  Table  5.2 
(b=0 . 4 )  the  probability  of  escape  by  monitoring  state  B  is 
Pesc=2 ‘ 5x10  These  results  suggest  that  statistical 

methods  are  useful  in  testing  this  type  of  circuit.  In  fact, 
if  the  input  statistics  are  controllable,  using  the  plots 
obtained  tesus  resulting  in  extremely  low  escape  proba¬ 
bilities  can  be  desicned  (P  =5.3x10  ^  for  m=0 . 8 ,  s=0 . 5  , 

esc 

a=0.3,  and  b=0 . 2  by  monitoring  state  A,  N=10,000,  s=0.01). 
However,  in  an  on-line  environment  where  prior  knowledge  of 
the  input  statistics  exists  —  input  statistics  are 
uncontrollable  —  using  the  computational  procedures 
developed,  the  escape  probability  and  therefore  the  test 
efficiency  can  be  evaluated  for  a  given  experiment.  The 
plots  obtained  for  the  probability  of  escape  show  that  in  an 
on-line  situation  if  the  inputs  exhibit  random  behavior, 
regions  exist  for  which  statistical  testing  of  circuits  is 
quite  attractive  low  probabilitv  of  escape). 
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prob  (A) 


Figure  5.2  P 


84 


In  addition,-  the  results  show  that  in  some  regions  where 
the  probability  of  escape  is  high  fcr  some  states  it  is 
low  for  others.  This  suggests  monitoring  the  statistics 
of  a  number  of  states  (outputs)  simultaneously  to  achieve  a 
low  escape  probability  over  a  wide  region  of  input  statistic 
variation.  For  example,  by  monitoring  both  states  A  and  B, 
the  escape  probability  will  be  low  as  the  statistics  of 
pin  B  varies  in  the  range  0.1  £b  <_  0 . 9  . 

5 . 3  Test  Simulations  for  the  Shift  Register 

The  results  obtained  for  the  escape  probability  of  the 

shift  register  have  been  used  to  specify  input  statistics 

for  the  computer  simulation  of  statistical  testing  of  the 

device.  From  Figure  5.6  which  shows  the  escape  probability 

of  state  D  versus  the  A  input  statistic  we  observe  that 

for  a=0 . 6  Pesc=1.8xl0  ^  and  for  a=0 . 7  ?esc=2. 58x10  ^ .  3oth 

cases  were  simulated  and  the  results  show  that  all  faulty 

configurations  failed  the  test  for  ?  =2.58x10  (a=0.7) 

esc 

and  faulty  configuration  2022  (serial  input  stuck-at-zero! 

_  A 

passed  the  test  when  P  =1.8x10  “  (a=0.6) .  The  results 

esc 

of  the  test  for  the  other  states  and  also  their  escape 
probabilities  for  each  case  are  given  in  Table  5.3. 

It  is  interesting  to  note  that  for  an  increase  of  16  percent 
of  the  input  statistic  A  the  escape  probability  decreased 
from  1.8x10  ^  to  2.58x10 
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Table  5.3  Escape  probability  and  results  of  test  simulation 
for  two-bit  shift  register 


Faulty  Configuration 


State 

Escape  Probability 

Passing  Test 

A 

6.0  x  10-5 

2122 

B 

1.1  x  10-4 

2022 

C 

7  x  10"6 

None 

D 

2.58  x  10'11 

None 

(a)  Pin  A  statistic, 

a=0 . 7 

State 

Escape  Probability 

Faulty  Configuration 
Passing  Test 

A 

5.8  x  10~5 

2122 

B 

10-4 

None 

C 

2.5  x  10-3 

None 

D 

1.8  x  10-4 

2022 

(b)  Pin  A  statistic,  a=0.6 
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5 • 4  Probability  of  Escape  of  a  Four-Bit  Synchronous  Counter 
The  feasibility  of  testing  a  four-bit  synchronous 
counter  by  statistical  methods  is  investigated  in  this 
section  by  examining  the  probability  of  escape  of  a  faulty 
circuit.  Figure  5.6  shows  the  input  and  output  pins  of  a 
typical  programmable  four-bit  synchronous  counter. 


A 

B 

C 

D 

LOAD  (ACTIVE  LOW) 
RESET  (ACTIVE  LOW) 
COUNT-ENABLE 

(ACTIVE  LOW) 


Figure  5.6  Four-bit  synchronous  counter 

The  input  pin  statistics  are  given  in  Table  5.4. 

Using  these  input  statistics,  an  experiment  with  a  test 
length  of  N=10,000  and  a  test  stringency  of  s=0.01  was 
defined.  We  then  obtained  the  escape  prob'bilitv  of  state  : 
(QvQ3,Qc'Qd  a-^  zero';  using  the  computer  programs  given  in 
the  appendix.  The  results  were  plotted  against  the 


Incut 


Pin 


Probabilitv 


A 

0 . 5 

3 

0.3 

C 

0.3 

D 

0 . 1 

LOAD  (L) 

0.4 

RESET  (R) 

0.9 

COUNT-ENABLE  (D) 

0.9 
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statistics  of  a  pin  varying  between  zero  and  one  while  the 
statistics  of  the  remaining  pins  were  held  constant. 

These  plots  appear  in  Figures  5.7a  through  5.7d. 

From.  Figure  5.7b  it  is  noted  that  extremely  low 
escape  probabilities  can  be  achieved  over  a  wide  range  of 
enable  input  statistic  variation.  This  suggests  that  in 
order  to  screen  faulty  circuits  in  an  offline  testing 
environment  the  statistics  of  PT  (count  enable)  should  be 
selected  such  that  0.4  <_  pt  <_  0 . 7  or  pt  <_  0 . 2  .  In  an 
on-line  testing  environment  where  no  control  of  input 
statistics  is  possible,  the  computation  procedures  developed 
can  be  a  guide  to  the  feasibility  and  efficiency  of  statis¬ 
tical  on-line  testing. 

5 . 5  Computer  Simulations 
From  the  plots  of  Figure  5.7  input  statistics  are 

selected  so  that  for  one  set  of  statistics  the  escape 

.  -3  -o  3 

probability  is  P  =5.10  and  for  another  set  ?  =1.7x10 

“  2  esc  esc 

These  statistics  are  given  in  Table  5.5. 
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Faulty  configurations  covering  all  single  pin  faults 

and  some  multiple  pin  faults  which  caused  minimum  deviation 

from  the  fault-free  input  statistics  were  simulated.  The 

results  of  the  test  are  tabulated  in  Table  5.6  for  both 

-2  3 

cases.  For  the  first  case  where  P  =1.7x10  none  of 

esc 

the  faulty  circuits  passed  the  test.  However,  in  the 

second  case,  forty-three  percent  of  the  single  pin  faulty 

conf icurations  passed  the  test  (?  =5.10  ^) .  These 

esc 

results  are  consistent  with  the  calculated  escape 
probabilities  for  the  specified  input  statistics. 


Table  5.6  Simulation  results  -  faulty 
configurations  passing  test 


-23 

P  =1.7x10  J 

esc 

V  = 

~  esc 

5x10 

-3 

2222202 

B 

s-a-0 

None 

2222220 

A 

s-a-0 

2122222 

L 

s-a-1 

| 

2212222 

P 

s-a-1 

2222212 

B 

s-a- 1 

2222221 

A 

s-a-1 
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6  CONCLUSIONS  AND  FURTHER  RESEARCH 

In  this  study  we  have  shown  that  the  statistical  testing 
strategy  outlined  in  Chapter  1  for  testing  sequential 
circuits  provides  excellent  fault  detection  under  specified 
assumptions  and  input  statistics.  The  assumptions  were 
that  faults  occur  at  the  input  pins  of  the  sequential 
circuits  and  that  the  input  lines  are  statistically  inde¬ 
pendent  and  stationary.  The  justification  for  these 
assumptions  was  provided. 

As  a  result  of  the  study,  algorithms  were  derived  from 
which  the  test  quality  for  given  test  parameters  (number  of 
samples  and  stringency)  could  be  obtained.  Using  these 
algorithms,  input  statistics  corresponding  to  high  test 
qualities  were  found.  These  input  statistics  were  then 
used  in  computer  simulations  of  the  test  for  specified 
faulty  circuits.  It  was  found  that  the  predicted  high  test 
quality  for  the  given  input  statistics  were  verified  by 
the  computer  test  simulations. 

Furthermore,  investigations  were  dene  in  various 
methods  for  obtaining  output  statistics  as  a  function  of 
input  statistics  from  the  behavioral  description  of 
sequential  circuits.  Using  the  Markov  analysis,  the  output 
statistics  of  an  n-bit  synchronous  programmable  counter 
were  obtained.  Also,  methods  for  obtaining  output  statistics 
directly  from  the  network  realization  were  developed.  In 
one  method,  the  output  statistics  were  obtained  directly 
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from  the  circuit  using  regular  expressions.  Another  method 
took  advantage  of  the  iterative  structure  of  some  networks 
to  obtain  output  statistics. 

Further  research:  An  important  assumption  made  in  the 
study  was  that  the  input  statistics  to  sequential  circuits 
under  test  were  independent  and  stationary.  Hence,  a 
statistical  analysis  of  real-time  digital  signals  is  needed 
in  order  to  justify  the  application  of  the  results  of  this 
study  to  real-time  applications.  The  case  of  statistical 
testing  and  the  standardness  of  its  approach  including  the 
results  of  this  study  should  provide  good  motivation  for 
work  in  this  area. 

A  further  outcome  of  this  study  is  the  possibility  of 

automating  the  procedure  of  obtaining  output  statistics 

directly  from  the  circuit  using  regular  expressions.  Given 

such  a  procedure,  faults  can  easily  be  injected  into  the 

circuit  and  the  faulty  output  statistics  derived.  This 

would  facilitate  the  derivation  of  test  quality  measurements 

for  circuits  :'.n  which  the  Din-fault  assumption  is  not  cood. 

«.  -  v  - 

In  the  study  the  effect  of  intermittent  faults  on  the 
test  was  not  examined.  Further  work  may  be  done,  for  example, 
regarding  the  effect  of  the  duration  of  intermittent  faults 
on  the  output  statistics  of  sequential  circuits. 

Finally,  the  algorithms  obtained  for  the  derivation  of 
test  quality  measurements  of  sequential  circuits  are 

directly  applicable  to  combinational  circuits.  Moreover,  the 

■m 

procedures  derived  in  the  study  can  be  used  to  design  effec¬ 
tive  offline  tests  also. 
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APPENDIX  A  Computation  and  Simulation  Programs 

Introduction 

This  appendix  contains  all  listings  of  the  programs 
required  for  the  computation  of  escape  probabilities  and 
for  the  simulation  of  tests  for  the  two-bit  right-shift 
parallel-load  shift  register  and  the  four-bit  programmable 
counter.  The  program  for  obtaining  a,  the  coefficient  of 
the  exponent  required  for  G(f),  the  pin-fault  distribution 
function,  is  also  provided.  Tab] e  A.l  contains  a  glossary 
of  the  main  programs  and  the  subroutines  required  by  each 
program.  Example  input  data  are  provided  for  each  program 
in  the  listings. 
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Main  programs  and  subroutines 


96 


Program  or 
Subroutine 

ALPHA 


BICOFF 


CNSTAT 


CNTRA 


CNTRSIM 


PESC 


PESCAN 


RAND 


SHIFS 


SHIFT 


SHIFTSIM 


Definition 


Computes  exponent  coefficient  for  pin-fault 
distribution  function  given  number  of  input 
pins  . 

Routine  that  generates  binary  coefficients 
of  a  decimal  number. 

Routine  that  computes  state  probabilities 
of  an  N-bit  programmable  counter. 

Routine  that  simulates  an  N-bit  programmable 
counter  under  random  inputs. 

Program  that  simulates  the  statistical  testing 
of  a  programmable  counter  with  specified  pin 
faults . 

Routine  that  computes  probability  of  escape 
given  the  fault  density  function,  test  length 
and  test  stringency. 

Program  that  generates  the  fault  density 
function  of  a  given  sequential  circuit  under 
the  statistical  pin-fault  model  and  calcu¬ 
lates  escape  probabilities. 

Routine  that  generates  random  one  with 
specified  probability. 

Routine  that  simulates  a  2-bit  right-shift 
paral lei-load  shift  register  under  random 
inputs  . 

Routine  that  computes  state  probabilities  of 
a  2-bit  right-shift  parallel-load  shift 
register . 

Program  that  simulates  the  statistical  testing 
of  a  2-bit  right-shift  parallel-load  shift 
register  with  specified  pin  faults. 
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/  / 

//c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

■  c 
c 

000  1 
0002 
0003 
0006 
0005 
0  0  0  6 
00  0  7 
0  0  0  5 
000? 

00  1  0 
00  1  1 


00  I  2 
CC  3  3 


00  1  6 
00  1  0 
00  16 


c.XcC  flGCG 

•SySIn  00  « 

PROGRAM  name  PESCan 


THIS  program  COMPUTES  THE  fault  DENSITY  FUNCTION  of  AN  S-BIT  PROGR¬ 
AMMABLE  COUNTER.  7h£  PRC8A3ILTY  GF  ESCAPE  IS  ALSO  COMPUTED  FOR  A 
SPECIFIED  TEST  LENGTH  and  STPInGEnCY. 

The  program  is  EASILY  MODIFIED  SUCH  THAT  ANY  SEQUENTIAL  CIRCUIT  Can 
es  analysed,  only  the  function  relating  output  to  input  statistics  * 
NEED  BE  SPECIFIED.  In  THE  PROGRAM: 

AlN  IS  AN  ARRAY  CONTAINING  THE  INPUT  STATISTICS. 

NP  IS  THE  NUMBER  OF  PINS. 

NQIT  IS  THE  NUMBER  OF  SITS!  SAY,#  OF  PRESET  INPUTS!. 

ALPHA  IS  THE  EXPONENT  CCEFF.  OF  THE  PIN  FAULT  PROBABILITY  FUNCTION 
C (  K  >  FOR  NP  PI  NS • 

CNSTAT  is  A  ROUTINE  THAT  COMPUTES  ThE  STATE  STATISTICS  GIVEN  INPUT 
STATISTICS  FOR  AN  N— 3 1 T  PROG.  COUNTER. 

IX  IS  THE  TEST  LENGTH  AND  DELTA  IS  THE  STRINGENCY. 

FOR  A  'FAULTY  COnFIGURAT  On  C OR RE SPOnD I n G  TC  0<K<  =  3**nP- 1  ,  G(<)  IS 

THE  PROBABILITY  OF  THAT  r  J  A  L  T  Y  CONFIGURATION  OCCUSInG. 

ZFU)  IS  THE  OUTPUT  STATISTIC  CORRESPONDING  TO  FAULTY  CONFIGURATION 
k.  pHim  is  the  ASRAr  containing  the  fault  oensity  function. 

P  E  SC  IS  A  ROUTINE  That  COMPUTES  The  ESCAPE  PROBABILITY  GIVEN  The 
Fault  OENSITY  FUNCTION,  The  TEST  LENGTH.  TEST  STRINGENCY  and  FAULT- 
FREE  CUTOUT  STATISTIC. 

SASAN  AROALAN.  SUMMER.  1978. 


DIMENSION  FFR£S(2S6) 

DIMENSION  P I < ( 2 1  *  I  0 1  ) 

OIMENSICN  1  NF  (8.35.6)  «LN'(6  ) 

DIMENSION  8CC  16)  .AIM  256)  .5(256)  .PC (256) 

C  j  M  E  NS  1 C  N  AlN2(  8)  .01  0) 

01  MENS  ICS  PHI  (  1  001)  ,F(l  001  I 
DIMENSION  G (  3  C  0  0 )  .  Z  F  (  3000) 

INTEGER  A  <  8 ) 
real  l 

DATA  AIN/0.9,0. a, 0.9. 0.1 .0.3. 0.2. 0.5/ 

OATA  FFKcE/0.223^.0.20035.0.  12025. 0 . 39  J  <•  .u  .  O0A  3  I  5  .  C  .  9S  I  3  . 
SO. 05.0.  C395.0. 02t?9,0.0Z2d.  0-  J1  35. C.  01  0  -  ,  0.  00936.0.  G  09  G  -  . 
SO. 0055.0. 0063/ 

C 

c  DATA  FOP  CALCULATION  OF  Ph 1 ( 2 ) 

C 

ARG  =  2.0/0.  I  060993 
ALPHA=AtCG( a«G) 


C  NPX 1  IS  The  NUMBER  OF  INCREMENTS  FOR  THE  INPUT  STATISTIC  vt- 

C  OX  IS  THE  INCREMENT  value. 

C  NPZ  IS  THE  number  OF  CLEMCNTS  In  P^ 1 ( Z ) 

C 

NPZ = 1 000 

NPX 1 -s 1 1 

OX= 1  . 0/ t  NPX l  - l  1 

c 

c  nP  =  NU  m  BEt  OF  PINS 
C 
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00  17 
00  1  6 
0C1  9 
C  02  0 
002  1 
0022 


C 

c 

c 

c 

c 


NP=7 


2 


Nfl  l  T  s  * 

Ns  1 

DO  2  I  “  1  .  N3  I  T 

N=  N  *  2 

DO  J  050  1 STAT E= 1  •  1 


VARY  INPUT  STATISTIC  C  OR  R  C  S  °  0  Nl>  I  NO  TO  MMJL)  *H|L£  <££3fNG 
REMAINING  INPUT  STATISTIC  FIXED*  ALLOTS  TM£  OROB*  OF  ESCAPE 

8F.  obtained  as  a  function  cf  an  input  st-tistic. 


0022 

CO  1040  JL - 1 • a 

0024 

TEMPS A  I  N  (  JL  ) 

0025 

CC  1  020  I  G= 1  « NPX i 

0  0  2  C 

A  I  N(  JU  =  (  1G-  1  )  *  0 X 

0027 

P  =  A  I  N  (  i  > 

0023 

L  -  A  IM2) 

0029 

PT=  A  IN<  2 ) 

0030 

DO  57 1  M  I  =  i  , NS  I T 

C  0  3  1 

571 

A  IN2(  MI  >  - A I N (  3  *  M I  ) 

C 

C 

<«* 

COMPUTE  fault-fpee  ST AT  ; 

ST  J  CS  . 

u 

r> 

o 

O 

u 

CALL  CNST AT (  P  .L *PT . FFREE 

, N5IT .PC 

.  3C 

0033 

Z  J=FFW££ (  I  ST  ATE ) 

0  C  3  4 

kP I  TE (  3 . 7  7o I 

0035 

77fc 

FORMATl//10X,'»*««  J  NPU 

T  P»L?A2 

1L  I 

oose 

WR l  Tc(3,777l( A|  W(NK),NK= 

1  .  NP  > 

0037 

777 

FORMAT (  1  ox ,F3.5/ > 

0033 

DO  5  KS  \  ,  NP 

0039 

5 

LN<  K  ) =0 

0  0  a  o 

NF=  1 

0  0  4  1 

00  6  J= 1 *NP 

0  C  4  2 

6 

Nr  -NF *  2 

004  3 

NF=NF- I 

004  4 

O 

o 

o 

It 

004  5 

CALL  3ICCFF (  I  ,NP. 0C  > 

0046 

Kh=0 

004  7 

DO  15  <  =  l  ,.sJ> 

0048 

I  F  (  3  C  (  <  /  *5C.0>Nt3=N3+l 

004  9 

1  5 

CGn T  1  nuE 

0050 

LN(N3l=LMN9l*l 

0C5  1 

DC  20  <= l .sP 

JCS  2 

20 

I  NF  <  N3  ,LM  N'3  >  .  '  >=3C  (  K  ) 

0053 

l  0 

r- 

CC-NT  I  NUE 

005  4 

COMPUTE  G( <  )  .  ZF<  < )  • 

p£  S 1  . A  I N2  ,  N ) 


v  v  £  C.  T  Ck  »»**«/> 


0055 


005o 

0057 


c 

K.K  =  0 

r 

C  ••  1  "  IS  ThE  Nuh6E  p  OF  PINS  a  1  -aulT* 

C 

CO  AO  I = 1 , NH 
<1=1 
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99 


oose 

0059 
0  C  6  0 
0061 
0  0  6  2 
00*3 

006<t 

0065 
0066 
0067 
0063 
0069 
0070 
007  1 
OC  7  2 
0  C  73 
0074 
0075 
0076 
0  C  7  7 
00  78 
0  C  7  9 
0030 
0081 
C  0  8  2 
0  0  5  3 

coe* 
ooe  * 

OOSc 


ooa  7 
0033 
oce9 
0090 
009  1 
0092 
CC93 


009  4 
C  09  5 
0096 
0097 
C  09  8 
0  099 
C  1  00 
0  10  1 
0  1  02 
C  I  OJ 

0  104 
0106 
0  1  06 
0  10  7 
0  I  OP 
0  l  09 


01  10 
0  111 
0112 
01  1  3 

0  114 


0  115 
0  116 
01  1  7 
01  1  8 
0  119 
0120 


PRB=£xP( -ALPHA* l 1 

“  N  K—  1 

OC  4  1  KS 1  ,K1 
4)  NK=Nk»2 

0Q.4S  K*  1  ,NK 

CALL  3 ICGPFC K ,K1 , BC 1 
LNN*LN( 1 ) 

00  46  JS l ,LNN 

00  48  I K= 1 , Np 

43  4  (  I  K  1=2 
1L  =  0 

OC  47  1K=1,NP 

1  F  (  1 NF(  [  . j.  1 K ) * NE • 0 1  GOTO  47 

l L= I L  * l 

A{ I K ) =9C ( IL ) 

47  CONTINUE 

00  500  mi =i ,np 
A  R  =  A ( Ml  J 

I  F  <  Al  N(  M  l  )  ,  NE  •  0  #0  )  GOTO  499 

e (mi )  =  o  #  o 

IF ( AR. £Q.  V  }  9(  Ml  JS1 .0 
COT  C  500 

499  B(.M  I  l=AR/2.  0*<  1  •  0*  (  AR-2#  0  )  *  (  A  I  N  i  M  I  )  -2  •  u  »  /  A  1  N<  M  I  )  )  *  A  I  S  (  M  I  1 

500  CONTINUE 
R-0< l ) 

Ub(  2  > 

PT  =  Et 3)  . 

00  50  1  mui  .kbit 

501  A  I N2 ( M I  )  =  9( 3* m i  j 
C 

C 

CALL  CNST AT  ( R ,l . PT . S, NS t T . PC . SC . W£S1  .AIN2.M 

KKsKK-^1 

C( KK )SPS5 

2F  (•<<  )  =S<  ISTate  1 
**b  CONTINUE 
45  CONTINUE 
40  CONTINUE 

c 

C  CALCULATION  GF  Pht(Z) 

c 

0Z= 1 • O/NPZ 
CZ2  =  CZ/2  *0 
NP  Z 1 =NPZ ♦ I 

I  TE  (3*113)  I  3T  ATE 

113  FORMAT*  /10A .  • ST  ATE  NUMBER:  •  ,  I6//1 
00  600  1=1 ,NPZI 
Z-K  l- l 1 *0Z 
ZL=Z-DZ2 
2h=Z +DZZ 
SUM»0 • 0 
DO  650  *  = 1 , kk 

IF  (  {  ZF(  *>  ,GT  .ZL  >  .ANO.l  ZF  IK)  ,L 1  .  ZM)  )  5Uv=SU««U(  K  ) 

650  CONTINUE 

PHI ( I ) =5UM 

f<  r » -z 

too  CCnT I NUc 

c 

C  C\LCULATE  PC0SAB1LITY  OF  ESCAPE 
C 

I  X=  I  0000 
OELT A=0 .0 l 

call  pe  sc  (phi  .zj.oelia.spzj  .pfioe.ui 
wPIT5(3,M6)ZJ.0£LTa.Ix  .PROS 

llo  FORMAT!  //iox.'Zjs  '  •  F0  •  S  ,  '  ^  I  NDQ  .  ,  0F  ,3DUEJ  ,  NP 

•  VECTORS : • , I  a  , // I  0*  .  •  PCOB AS ! L I  Tr  GF  E SCAPE : '  . E 1 4 . 7 ) 

C  END  OF  CALCULATION  OF  ORCO.  ESCAP" 

C 

1020  CONTINUE 

A  INI  JL >  =  TEMP 
I OAO  CCNT INUE 
1050  CONTINUE 
STOP 
EnO 
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100 


OOC  1 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

0002 

0002 

000* 

0005 

oooe 


coc? 

0003 
0  009 

00  1  o 
00  1  1 
00  12 
00  1  3 


00  1  * 
0015 
00  I  6 
00  1  7 
coi  a 
00  19 
0020 
002  l 
0022 
002  2 
0  0  2* 
002  S 
Q0  2  t 
002  7 
0023 
0029 
0030 
002  1 
0032 
0  C  33 
003* 
0025 
0  03  6 

0  C  3  7 

0038 
0039 
00*0 
00*  1 
00*2 
00*2 
00** 
00*5 
00*6 
00*7 


SUBROUTINE  CNST  *T  (  R  ,  L  .PT  .  S*  NU  .PC  .  SC  .  H£S  l .A.NJ 


THIS  ROUTINE  COMPUTES  Tw£  STATE  STATISTICS  OF  AN  N-SIT  PROGRAMMABLE  •• 
COUNTER  SIMILAR  TO  ThE  7*163  GIVEN  The  InP'JT  STATISTICS*  * 

R,L,AnO  PT  are  THE  RESET .LOAD, AND  COUNT  ENABLE  INPUT  STATISTICS*  • 

a  is  the  array  cf  input  preset  statistics  lsb  first.  • 

S  IS  AN  ARRAY  CONTAINING  THE  COMPUTED  STaTc  STATISTICS*  * 

NB  IS  THE  NUMBER  OF  BITS#  • 

N=2**N0  IS  AN  INPUT.  * 

PC*  ac  Afic  FORKING  arrays.  * 

R£S I  IS  THE  STATISTIC  CF  THE  STATE  ZERO  AND  IS  AN  OUTPUT.  • 

8ICCFF  IS  A  ROUTINE  THAT  GENERATES  ThE  BINARY  COEFFICIENTS  OF  A  * 

GIVEN  DECIMAL  INTEGER.  • 

SASAN  ARCALAN.  SUMMER.  1978.  • 


DIMENSION  A<  NO  )  .  3<  N  )  «  PC ( N | , 2C ( N3 ) 

■  R£AL-LrKP  -  -  -  -  — 

ALFA= 1 ♦ 0-<  1  . O-PT 1 «L*  R 
BETA=R*PT  *L 
GAMMAsR# (  1  .  o  —  L > 

C  CALCULATION  OF  PC ( * 1 

c 

OC  l  1  =  1  .N 

CALL  8ICCFF( l .N0.BC ) 

KP=  l  .  0 
DO  2  K  =  1 . NB 

2  *P=  I ( l.O-A(K) )♦(-!. 0*2. 0*AtK>  >  *3C ( < ) )*<P 
PCI  I  )=KP 
l  CONTINUE 

C  CALCULATION  OF  1 . 0- GA M m a  * S I GOF S I G ( BET  A / AL F A )  I < / 1 • 0 ♦ S l  S ( 9 E T A / AL F 
C 

SM 1=0. 0 
SM3=0. 0 

b£TAL=SFT  A/ALFA 
flCAs 1 .0 
DO  10  1  =2  .  N 
eoA=eo**B= tal 
smi =smi #ao* 

I l=N- I ♦ 1 

HL  A  =  1  •  0 
00  2  5  MS  1  , »  1 
2 S  6LA  =  PLA  *>1ET  al 

Sm  3=  S  M  3 ♦PC l  I)*<  1.0-BLA) 

1  0  CCNT  i  NUE 

SM3sSM3/( l . 0-9ET AL ) 

RESI=<  l  . O-GAMMA* SM 3/ alF  a  » /(  i . 0*  SM 1  ) 

00  50  J=2.N 

HA  J  =  1  •  0 

00  23  LL=2.J 
23  EA J=e A J *HFT AL 
Shi *0.0 

1F( B£7 AL. EQ. 0 1G0TQ  32 
00  30  k.  =  2.j 

K.  1  =  J-N  ♦  J 
#  SCAA2  l  .  0 

DO  3  1  M - |  «  K  t 

31  PC*<*9C«K*o£TAL 
aCA<=0CA </3ET al 

30  Sm l sSMl ♦ BD*< «PC l * l 

32  P£S2=S«J *Gamm a/ ALFA 
SI  J J =8  A  j  *  RE  S l ♦R ES2 

50  CONTINUE 
S I  1  ) =R£S 1 
RETURN 
ENO 
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0001  SUBROUTINE  P5SC(PhI .ZJ.OSLTA.N.PPO^.IX) 

c  #*•«•«*«»»***•••««*»*»»•*»***%*»»****»•••««»•»*.*»*•*••••**•***•* 
c  ♦ 

C  *  *IM6  FOLLOWING  SueKCUTlNS  CALCULATES  THE  PROBABILITY  OF  ESCAPE. 
C  •  PHI  IS  AN  ARRAY  WITH  N  ELEMENTS  CONTAINING  THE  FAULT  DENSITY 

C  »  FUSCTICN* 

C  *  ZJ  IS  THE  FAULT-FREE  OUTPUT  STATISTIC. 

C  *  IX  IS  THE  TEST  LENGTH. 

C  A  OELTA  IS  the  TEST  STRINGENCY. 

C  *  PROS  IS  THE  ESCAPE  PROBABILITY. 

C  *  SASAN  AROALAN.  SPRING  1978 

C  • 

c  ••*•*•*•*•*•**«**«*•*****»»*••••**•*»*••**•«••***•*««•••••»•«»»*• 


0002 

D  I  MENS10N  PHI  (  1  ) 

C  0  03 

N 1 =N4 1  “ 

00  0  A 

2 !NC=  1  • 0/N 

ocos 

PR  C5=0.0 

oooc 

IK=iX«( 2 J-OELTA ) 

0007 

LK=IX*<  2  J-OELTA) 

cooe 

TPX«2. 0*2.1 Al 592b* 1 X 

0009 

I F (  (  IK.LT.O).  OR. (LX.GT.1XM  RETURN 

00  l  0 

CO  30  I=IK.LN 

00  1  1 

RK—  I 

00  1  2 

p  sum=  o.o 

0013 

DO  35  K=2.N 

00  I  a 

IF{ PHI ( K 1 . EQ. 0. 0) GO  TO  35 

CC  I  5 

FKs<- I 

CO  1  t 

Fn=n 

001  7 

22=FK/Fn 

coi  e 

2  2m -Z2* ( 1 .0-22) 

00  1  9 

TP=TPX*22M 

0020 

TEX=(RK-IX*Z2) *(R<- [x*22)/2*0/lx/22u 

002  1 

I F(  7EX.GT  .  1 00 .0 ) GO  TC  35 

0022 

T  EX=-T  £X 

CC23 

TEX=£xPt  TEX ) / S  CRT  (TP) 

0  C  2  A 

PSuxcPSum  +  ph I ( < ) *T  Ex 

OOPS 

35 

CCNT I nuE 

0  0  2  C 

PPGB  =  PCCS* PSUM*  21  NC 

002  7 

30 

CCnT  I  NUE 

oo2e 

RETURN 

0  C  2  9 

END 
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C'  PROGRAM  NAME  C MRS  l * 

c  *  » 

C  A  THIS  PROGRAM  SIMULATES  AN  N— BIT  PROGRAMMABLE  COUNTER  Si w I L A  R  TO  T«£  « 
C  A  74163.  THE  INPUTS  TQ  THE  PROGRAM  ARE  AS  FOLLOWS:  1 

C  •  CARO-Mt  INPUT  STATISTICS  N  0 (  *  QF  0ITS)  »R(RES£T)  ,L ( LGAD )  »PT( COUNT  EN- 

C  ♦  A0L  E )  FORMAT  I  2  .F  8  •  S  »  2F  l  0  •  7  « 

C  *  CARC*2:  PARALLEL  LOAO  INPUT  STATISTICS  CONTAINED  IN  ARRAY  A.  LS6  ' 

C  *  ENTERED  FIRST.  FORMAT  8F10.7  « 

C  a  CARD  »3  :  TEST  LENGTH!  NUMBER  OF  S I  MUL  AT  I  ONS  )  .  NS  I  M .  FORMAT  HO 
C  •  CARD**:  STRINGENCY  w I NOG* • DELT A.  FORMAT  FlO.7  * 

C  *  CAROLS:  FAULT  CCNFIGURATI CN  FOR  PINS  R.L*PT ,  L  S  8 . MS8. 

C  •  *2*  FAULT  FREE.  •  1  •  ST UCK- AT -ONE  .  *0*  S"TUC<— AT— ZERO.  FORMAT  8011. 

C  *  . 

C  »  • 

C  •  . 

c  A  PROGRAM  TERMINATES  if  s  oetected  in  first  COLUMN. 

C  A  OUTPUT  CONSISTS  OF  RESULT  OF.TEST1  PASS/FAIL).  SI^ULATEC  AVERAGES. 

C  •  FAULT  FREE  STATISTIC  FCR  EACH  STATE. 

C  * 

C  A  CNSTAT:  ROUTINE  THAT  COMPUTES  STATE  STATISTICS  GIVEN  INPUT  STATISTIC 

C  *  CNTRS:  ROUTINE  THAT  SIMULATES  COUNTER  GIv£N  INPUT  STATISTICS  ANO 

C  •  NUM6ER  OF  SIMULATIONS.  OUTPUTS  SIMULATED  STATE  AVERAGES. 

C  »  91CGFFI  ROUTINE  RE  QU I  RE  C  0Y  CNSTAT. 

c  *  ranc:  routine  requirec  ey  cntrs. 

c  A  SASAN  ARCALAN.  SUMMER,  1978. 

C  • 

C  - - - - - - - - - 

OCO  1 
0002 
0003 

0  W  0«* 

000? 

0006 
000  7 


0009 
0009 
OC  t  0 
OC  1  1 
OC  1  2 
00  13 

00  1  4 

00  15 
00  16 
GCl  7 
00  1  6 
00  I  9 
00  2 C 
007  l 

C 

c 

c 

0022 
0  C  2  3 


OlMENSlCN  a<2  56>  . S .  I  A ( 8  )  .  1  AS<  8)  , FTkEE! 2U6> 

01  MENS  ICN  T(  161  .9(10 
D I ME NS l Cn  PCC  lc)  .dC(  3  I 
INTEGER  F(16) 

REAL  L 

DATA  IAS /R 7335. 44310.65255.  76655. 90999.  5 3^6 5. 394  ?S.2  uv^J/ 
CATA  FFPEE/ 0.22873,0.20039.0.  l?02o.  0 . 09  3-  ,  j?0!5.v.JiU, 

SO. 05. 0. 0395. C.02o99.C.C223, 0.0 125.0.  0104,0,  00  934.0.  0j90-  . 
SO . 0  055 . C . 0043/ 

R E AO ( l . 3 C i ) N0 ,R ,L . PT  . 

OSACtI .302)1 A(<) ,  K=  1 ,\S) 

3  00  FORMAT (  i  I o ) 

301  FORMAT  (  I2.FS.5. 2FI0.  7) 

302  FC  RMAT (  6F 1  0. 7 ) 
w  R I  T E  <  3  •  320  ) 

320  FCPM4T(//'|0X,»N8.R.L  .or:  •//) 

•  RI  T  E(  3.301  JNS.R.L.PT 
a  R I T  E ( 3  .  322  ) 

322  FCRMAT ( // l OX  ,  •  A ,3 , C  ••••*•// 1 

Mfil T£(3.302) ( A( K) ,<=i ,NA| 

N  —  1 

00  19  JJSI.NB 

1 9  N=N»2 

lCmpuTc  fault  free  statistics. 

CALL  CNST  AT ( fi.U.PT  .FFREE.nB.PC.BC.RESI  .a.n) 

T  1  1  )  =F 
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0024 

T<2)=C 

cors 

T ( 3 1 =  PT 

002  6 

•• 

OC  S  20  K*S|  ,N3 

0027 

T ( 3»  K* I = A ( <K ) 

0025 

520 

CCNT i 

0025 

NP  =  N9-f3 

0030 

R£«.0(  l  .300  >nS  in 

0031 

R£AC(  1 .350ID£i_TA 

0032 

, P I T  £ ( 3  *  3  j  o 1  ns | m , OEL T  A 

0033 

310 

fCSHIK  1M1  .1  OX  .*  NUMgEH  OF 

0034 

a  5 

CONT INUE 

0035 

»SIT£(3.330) 

0026 

330 

FCPMAT (//2( 30t •  •••>./(/) 

0037 

P£40(l  »  360  KP(M  ,*.=  \  ,  NP  > 

0033 

IF{  F (  l  )  ,CT .2  ) STOP 

0025 

iso 

FORMAT!  F 1 0. T 1 

OOao 

360 

FC  PmaT  < 6011) 

00  4  1 

00  SOO  H [ a] , NP 

0042 

AP=F (MI) 

0043 

I  F(  T  (  Ml  )  .  Nc  .  0 .0  (GOTO  499 

0044 

F(Ml  1  =  0.0 

0  C  4  5 

I  F  (  F  <  M I  ) . £0 .  1  )  8  (  M  1  )=1.0 

0046 

c 

GOTO  SOO 

0047 

4  99 

2(MI  |34f/2.0*(|,0M»9-J.0)' 

0048 

500 

conti nue 

0045 

00  SOI  y I = 1 , N0 

C05C 

SOI 

A<  M  1  )  =ei  3  *M  I  ) 

005  1 

s  =  9(  1  1 

0052 

L=3( 2 ) 

0  C  5  3 

pt=3(3) 

0054 

00  5  5 
0C  56 
0057 


0  C  5  3 


0  C 55 
O  0  6  C 
006  : 


C  C  62 
006*. 
OCt  6 
0066 
0007 


0  06 1 
0  005 


SI  MUL  ATI uns : • «  I  1 0 i 


*  I  NO C 


-2  •  0  1  /  T  (  M  I  1  )  •  T  (  M  I  ) 


SIMULATE  PAULTY  CCNF  I  Gu=“  AT  I  CN. 


CALL  CNTRS(fi.L.PTtA,S,N3,IA,IAS.NSIlY> 
NS-  1 

00  49  1=2 ,NS 

49  NS=NS*2 

OC  SO  1=1 .NS 
00  SO  1=1,3 


PSRPQRM  1  £  ST  QN  S i MUL  A  T  £  0  4vEc-G£S. 


2L=FFP£5  <  I  I-06LTA 
2M=FFP65 ( I ) ♦0£lTA 

Ip(  <  S (  I  )  • GE • ZL )  • ANO •  (S<  I  ).L£.ZH)  )  GC  7  G  5J 


PP1NT  TEST  RESULTS  FCc  £ACH  STATE, 


370 


51 

372 

SO 

37S 


*PITE{3,370l(FCK).Ka| ,N»I 
fcrmat(/iox, 'faulty  conf r  gup at i cn 
CO  To  50 

T£ ( 3  .372 )  ( F { k i  .K-l  .NPI 

fofmat</iox,«faulty  conf  t  GU" at i cn 

*»P1T£(3,37S)  I  •  S  (  I  l.procEi  ij 

.:”r,T,:,ox-,T*?e  s,4Te 

10.7  *// J3x , 70!  •*•)/) 

COT  G  85 

ST^a 

FWO 


•  7  11 


failed  t 


.7  11 


PASSED 


.HO, 


00  7  0 

CC  7  I 

c-ort 


Paul  1 
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OOOl  ..  SUBROUTINE  SanO(P.J.  IX) 

c  * 

C  *  THIS  ROUTINE  GENERATES  A  random  one  hITm  PRC  9A  6 l L I T  V  P. 
C  •  J  IS  THE  Random  One  OUTPUT. 

c  • 

c  **»•**»••»•» •*»»*•»**•*••****•»•*«•««•*•*••••»•«*« ••****» • 

0002  CAUL  KANCUI  tX,tY,.TFL) 

0002  J* l 

0004  IP< YPL.GT .P ) J*3 

OOOS  I  x=  I  y 

0  0  C 6  RETURN 

000?  END 
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0001  SUBROUTINE  CNTQSCR'L  .*1  . A.S.Nft.  I  A. I  AS.nS 1 «> 

c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 

0002 
0003 
0004 

coos 
0006 
000? 

0CC3 

o  009 
00  1  o 
oo  i  i 


c 

C  GENERATE  R*NCO  INPUTS 
C 


001  2 

CALL  S  AM)(  R  .  I  S  .  1  xfi  1 

00  1  3 

CALI.  BanJ(l,1L.UU 

00  1  4 

CALL  BAND(OT,!PT,:xPTI 

00  1  5 

CO  12  K  = 1 .N8 

CO  1  t 

S‘=A( K 1 

00  1  7 

I  XA  =  l  AS  (  K  1 

00  l  3 

CALL  PANCISA.IAG.IXAI 

00  19 

IAUIsUO 

CO  2  C 

I  AS (  K  )  =  I XA 

C  C  2  1 

1  2 

CONT 1 nuE 

0  C  2  2 

I  F  1  I  R  .  EC  .  0  1  GC  TO  1 

0023 

!F< I L . EC. 0 ] GGTO  2 

C  0  24 

I F (  1PT.E0.3I GOT  0  SO 

002S 

J  =  J*  1 

0026 

I F 1  J.EC.NAI  )  J=  l 

OC  2  7 

GOTO  50 

C  02  3 

1 

J-  1 

CC2  9 

GOT  C  50 

0030 

2 

I SUM=  o 

0031 

KE= 1 . 0 

0032 

00  20  X: 1 .NS 

0033 

1SUM=*E»IAINS-<*11*ISUM 

0  0  34 

KE  =  K£  *  2 

0035 

20 

CONT 1 NUE 

00  36 

JA  1  SUM.  1 

0037 

50 

SI  J)  =SI  J  1  ♦!  .  0 

003ft 

55 

CONT 1 NUC 

0039 

CG  25  Jsl.N 

THIS  ROUTINE  SIMULATES  an  N-B1T  PROGRAMMABLE  c  ount  er  SIMILAR  to  The 
74163.  R.L.PT  are  the  RESET. LOAD.  AND  COUNT  ENABLE  INPUT  STATISTICS* 
A  is  I  HE  ARRAY  CONTAINING  THE  PRESET  INPUT  STATISTICS  L  SB  FIRST. 

N6  IS  THE  NUMBER  OF  BITS!  PRESET  INPUTS). 

S  IS  THE  ARRAY  OF  SIMULATED  STArE  AVERAGES. 

IAS  IS  AN  ARRAY  CONTAINING  N0  RANDOM  INTEGERSI3-S  OIGXTSJ. 

XA  IS  A  WORKING  ARRAY. 

NSIV  is  THE  NUMBER  CF  SIMULATIONS. 

RANO  IS  a  ROUTINE  THAT  GENERATES  A  RAnOCM  ONE  WITH  SPECIFIED  PROB¬ 
ABILITY.  SASAN  ARDALAN.  SUMMER,  1978. 


.  0 1MEN3 l CN  A I 1)«SI1).IA(  1  )  «  1  A S (  1) 

REAL  L 

DATA  I  X  R  •  I  XL .  IXPT/3B329.  So 973. 61  1  3l  / 
N=1 

DO  5  I  =  l  .NB 
S  nsn«2 

00  15  J=  1  .  N 
15  SI J J =0. 0 
J=1 

DO  55  KKsl  .NS  I  M 
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0040  25  5( J)sS( JJ/NSIM 

C  •  *!  TE<3 *  325) 

C  wWlT£<3.100  l(  S<  J)  .  Jsl.NI 

0041  325  FCKWAH  Jhl,//,10X,'  SI  M  J  L  a  7  c  0  r?E  3VJL  T  S  •  /  /  ) 

0  C  4  2  100  r  C  ®  M  A  T (//10*t£l4.7) 

C 0 4  3  PETufiN 

004a  End 


ETXAMPlT  DATA  P’OR  CtfTRSltf 


//C#SV£IK  CO  * 

40*9  0*4  0*9 

0.9  0.3  0.3  0.5 

10000 

0.0  1 
2222222 
1222222 
2022222 
2220222 
2202222 
2222202 
2222220 
2122222 
22 12222 
2221222 
2222 1 22 
2222212 
2222221 
1 2 12222 
1012222 
2  C  2 0  0  02 
222000 1 
022222 
222022 


1  COO 

4  .  9  0.4  0.9 

0.1  0.3  0.3  0 • S 

0.0  1 

1 cooooo 

4  .9  0.4  0.9 

0.1  0.3  0.3  0.5 

/• 
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PROGRAM  NAME  ShIFTSIM 


THIS  PROGRAM  SIMULATES  THE  STATISTICAL  TESTING  OF  A  T*0  BIT  PARALLEL 
LOAD.  SHIFT  RIGHT.  SHIFT  REGISTER.  INPUTS  TC  THE  PROGRAM  ARE: 
capc*i:  input  statistics  s.m.a.s  format  sfio.7 
CARC»2 : ^number  of  s I mulati CNSI test  LENGTH)  FORMAT  110 
CARDO:  STRINGENCY  FlNOCw  FORMAT  F10.7 

caro»a:  fault  CONFIGURATION  for  pins  S.M.A.e.  The  CONFIGURATION  is 
SPECIFIED  BY  '2'  fault  FREE.  1 1*  ST  UC  K- AT- ON  E  .  ’0’  ST UC K- AT -2E RO . 

the  format  is  son.  each  fault  configuration  is  specified  on  a 
separate  Caro. 

the  program  terminates  *hen  a  s  is  punched  in  column  i. 

PRINTOUT  IS  CONSISTED  OF  .HETHER  Th£  CIRCUIT  PASSES  OR  FAILS  THE 
TEST.  THE  FAULT  CONFIGURATION.  THE  FAULT  FREE  STATISTIC.  ANO  THE 
SIMULATED  AVERAGE. 

shifts:  subroutine  that  simulates  shift  register 

shift:  subroutine  that  computes  state  prcbaeilites  of  shift  reg. 

CTHER  routine  RE0UIRE0  HAND. 

NP=NUMBER  OF  PINS 

N3=  NUMBER  OF  NITS 

CELTA=  TEST  STRINGENCY  »IND0*. 

fcki:  array  ccntaining  fault  configuration, 
tiki:  array  ccntaining  input  statistics. 


OIMEnSICN  PPI  A )  .Ptl  )  0000 ) 

DIMENSION  TUl.St.l  .FfSEEin 
OIMEnSICN  S(M ) 

INT  EGER  SSCA.2l.Fi4! 

NP  =  L 
NS  —  2 

REA01l.3021<Ttl).J=l.«*> 

302  FORMAT ( gF l 0. 7  I 

HEACI l ,  300 1  NS IM 
300  FORMAT (  I  l 0  I 

PSAOC I . 3S0I0ELTA 
WRITEC3.310  INSI M.OEL  T  a 
310  forma  I  (  1  m  1  .  I  0  A  .  •  NUMBER  Cc  SIM'JLATI 
MRITE(3.333)(T( I), 1=1.4) 

333  FORMAT  ( //I  OX  .  '  I  nPUT  PH06AE1HTY  VEC 


ATI  CNS :  ■  ,110. 


I  I  NO  W •  l  *  »  F  1  , 


.  '//iOA,-tc i:, 


SIMULATE  FAULT  FR£E  CIRCUIT. 


call  SHIFTS* T .S.nSI “.SS.PP.PT > 

call  shift(pp,ffr&£) 

35  CON  T  l NU: 

wRI T  6 ( 3 . 330  > 

330  FCfcMAT{//2(30<a  •*•»/)/> 

FFAOI  I  .  J  C  0  I  <  F  (  <  )  ,  *  =  l  ,NP) 

1  F<  F<  i  )  #  GT  •  2  )  ST  OP 
350  FCRMATIF10.7) 

36u  FCRMAT ( KO I  1  ) 

00  500  Ml  =1  .Sp 
APsF (MI) 
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0  C  2  7 
0026 
0  C  2  9 
0030 
0031 
0032 


0033 


1F( T( Ml) ,N5. 0. 0 JGCTO  499 

ei Ml  ) =0 .0 

!  F 1  r  <  M  l  1.E1C.1  )  L3  <  m  i  >  =  1*0 
GOTO  500 

4-99  5(MI  |  =  iR/2.0*(  l  •  0  4*  (  AR-2. 0  >  *  (  T  (  MI  )  -  2 .0  )  /  T  ( Ml  )  )  *T  (Ml  ) 
500  CONTINUE 

SIMULATE  FAULTY  CON'F  I  GURA  T  I  ON  . 


0034 
0025 
0  C  3  b 
0037 
0023 


0039 
004  0 
004  l 


c 

CALL  SHIFTS! S.S,NSI^*SS.PO.PT) 

NS*  1 

00  49  I  =  1  ,N0 
49  nS=  n  S  *  2 

DO  50  1^1 .NS 
C 

C  CHECK  IF  SIMULATED  OUTPUT  ■  I  7  H.  I N  TEST  *lNDOw  OF  FAULT  Fk£E  Cl 

C 

2L  =  FFP5E (  I  J-OELTA 
2H=FFPEE(  I  )  ♦DELTA 

IFUSt  U.GE.ZD.ANO.tSU  J.LE.ZHMGOTC  51 
C 

c  print  test  results  for  each  state 
c 


0042 

WPI  TEC  3  ,370) ( F( K )  .K=l  .UP  ) 

004? 

3  70 

FCR-MA  T  (  ✓  I  cx  ,  •  FAULT  Y  CCNF  I  GuR  a  T  1  CN 

*  .4  i 

1  .  •  FAILED 

THE  TEST*. 

OCH 

GO  TC  50 

0045 

51 

wRITE<3,J72)(F(K>.k.=  1  ,NP) 

0046 

372 

format ( /I  ox . • faulty  CCNF  1 gurat 1 CN 

*  t  4  1 

1  .  '  PAS  SED 

T  rt£  TEST* 

004  7 

50 

wPI  TEI3.375)  l  *S(  I  >  »FF9ESt  1  > 

004  3 

375 

FORMAT  (/ 1  OX ,» ST  ATE  *•.16.*  STATE 
S.F10.7..//33X.  7  0  (  >/) 

PPU3.  • 

•  F  l  0*  7*  •  FA 

ULT  free  - 

C  C49 

WR  I  T  :  (  3 . 3F.3  )  FP 

0050 

835 

FOPMATiy/lOX. • INPUT  MEASURES! S.M, 

A  .  r  )  :  • 

,  <*  C  F  7  *  *  ,  3  X  > 

) 

005  1 

GOTO  35 

0  C  5  2 

STOP 

0  C  5  3  £  NO 
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110 


coo  i 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 
c 

0  002 
0003 
00  04 
0005 

ooce 

000  7 
0008 
0009 
00  1  0 

001  I 
00  1  2 
00  1  3 
OC  1  4 
00  1  5 
00  I  t 
CO  1  7 
00  1  3 
001  9 
0020 
002  1 
0022 
0023 

0024 

0025 
0  0  2  fc 
0027 


SUBwOUTUt  SH  JFTSIPV  .S.nSI  SS  > 


THIS  ROUTINE  SIMULATES  A  2-E1T  P AR al L EL-LC A 0 .  R 1 GHT - SH I  FT  . SH 1 F T 
REGISTER.  PV  IS  THE  ARRAY  CONTAINING  INPUT  STATISTICS  S.M.A.  AND  B. 
S  IS  AN  ARRAY  CCNTAInInG  Th£  RESULTANT  SIMULATED  AVERAGES  FOR  EACH 
STATE.  NSIM  IS  THE  NUMBER  OF  SIMULATIONS. 

SS  IS  A  TWO  OI«ENSIONAL  WORKING  ARRAY. 

subroutine  rand  generates  a  random  one  kith  specified  probability. 

SASAN  AfOALAN  SUMMER,  1978. 


D I  MENS  ICN  P  V  (  A  )  %  S  I  4  ) 

INTEGER  SS(4.2) .PS.SR.A.e.M 

DATA  IM. IS. I  A. 13/33329, tib 9^3.51 1 31 .7 6229/ 
SSI  1  .  I )  =  1 
SSI  2.11=4 
SSI  3 , 1  ) =a 
SSI  2.21=3 
SSI  1  .21  =  2 
SSI  A  ,  i  )a  1 
C 

CALL  RAND (RM.Mi  I M  J 
CALL  RanDI RS. $R . I S) 

CALL  R ANC ( RA  . A  .  I  A  ) 

CALL  RANG! RB.3.  I  9  1 
lF(M.EO.O) GOT  0  1 0 
PS=a«.3*2*  1 
IF!  PS.E0.3 ) PS  s A 
I F (  f a*3 1 • EC. 1 ) °S  =  3 
S( . =S(PS) ♦ 1 .0 
3CTC  SS 

l 0  n>S=Sb<  PS  .  SR+ 1  ) 

S(PS)=3(?SIH .0 

55  CONTINUE 

OC  14  I-J.4 

14  Si  I  >  -SI  I  ) /NS  1 m 
PETUhN 
ENC 
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(- 

c  * 


c 

c 

c 

c 

c 

0002 
000  2 
00  04 
0  0  C  6 

oooe 

0  007 

oooe 

0009 

00  1  c 
0011 
0012 
00  1  2 
00  l  4 

001  t 
00  1  t 
00  1  7 


this  subroutine  complies  the  state  probaeilties  cf  a  2-eit  parallel-* 

LOAD*  RIGHT-SHIFT,  SHIFT  REGISTER.  • 

0  IS  THE  ARRAY  QF  COMPUTED  STATE  STATISTICS.  • 


DImEnSICN  TINP).Q(a) 

real  M.MC 
S  — T  (  1  ) 

M  =  T<  2) 

Ast  {  3) 
e-T(4i 
AC-1. o- A 

ec=i  .0-6 
SC= 1  .o-s 
M  c  —  1  . 0-M 

G(  1  )=SC*MC-S*SC*mC^MC-SC*a*m*mc-*-bC*aC»w 
C  (  2  )=S*mC-S*S*mC*mC-S*a*w**mc-.?C»a*m 
C<31=S*S«mC»mC*a*S*mc*m*m*a*s 
0(4  )=mC*MC*S*SC^mC#m*SC*A*6»ac*'' 

RETURN 

ENO 


example:  DATA  :5Hiri5lM 


//G , SYSlN  oo  * 

0.6  0,9 

1  COOO 

C.  C  1 
2222 
2  1  22 
1222 
2212 
2221 
0222 
2022 
2202 
2220 
2  1  02 
2  10  1 
0201 
2111 
2  1  12 
5  5  S  S 
/• 


0.7 


0 


7 
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c 

c 

c 

c 

c 

c 

c 

000  1 
C  0  0  2 
000  3 
0004 
0  0  Q  5 
0006 
0007 


0002 
000*5 
00  1  0 
00  1  1 
00  1  2 
00  1  2 
00  1  4 

00  1  5 
00  1  6 
OC  V  7 


*  THIS  PWJGSAM  COMPUTES  THE  EXPQN&NT  COEFFICIENT,  ALPHA,  OF  THE  P ! N-  * 

*  FAULT  PROBABILITY  0 (K).  » 

*  N'p  IS  THE  NUMBER  of  input  PIN'S  OF  T  He  PACKAGE!  C  I  RC  U  I  T  1  •  * 

*  • 

E  KTEHNAL  FCT .COM3 
C CMMCN  NP 
1 En  0  =  50  0 

e  p  s= i • oe-A 

XL  1=0. 0 
XRI  =1  •  0 
00  20  NP= 1 , 4  C 
C 

C  R7.M1  CAN  3£  FOUND  IN  Tn=  IBM  SCIENTIFIC  SUBROUTINE  °aC<agE. 

C 

CALL  RTm  I  (X.F.FCT  .XL l  .XPI  »£PS» I  END •  1  £  R ) 

WRITE!  2. 100  )X*F  •  XL  I  .  XRI  ,£?$, I EnO,  IER 
100  FORM AT  (  •  *  ♦  1  OX .  *  X. F. XL  I  »  XR I  .£»S.IEN0.IER,//5(5X,E14.7)//13X,2 

xx=2 . 0/ x 
ALPHA=ALCG( XX ) 
wRITE(3.2S0  Ul.PHA.NP 

250  FORMAT (// 1  OX .**•« *  alpha  •*•*♦,£!  4.7,'  *•*  »  OF  PINS 

S  1  3  ) 

20  CONTINUE 
STOP 
END 


000  1 
00  02 
0003 
COCA 
0005 
0006 
0  0  C  7 
000  8 
0  COS 
00  10 
00  11 
00  l  2 


function  fct(xi 
external  COMB 

COMMON'  NP 
SUM=  0. 0 
X  K-  1  .0 

DO  40  1=1  • NP 
XKrXK«  X 

SUM=SUM*CCM5(  NP,  1  )*x* 
AO  CONTINUE 

FCT -SUM- 1  .0 

RETURN 

ENO 


000  l 
0  OC  2 
OUO  3 
000  a 
0  0  0  E 
0006 
0  OC  7 

o  o  oe 

0009 
00  I  0 
00)1 
00  1  2 
00  13 

00  14 


FUNCTION  CCMSIN.K) 

I F (  X.EQ. 1  )CCM8  =  N 
IF(k. EC. N>COMB=t .0 
I F (  <  K.EC.l  I.OR.  CK.EO.N)  JPETUPN 
x=  l  .  0 

N  M  K  s  N  —  K 
00  20  I  =1  .  N 
Xsx*  I 

1F{  1  ,EO,K  )  XX=X 
I F ( I .EO.NMK) XNMK=X 
20  CONTINUE 

CCM9=X/ XK/X NMK 

RETURN 

ENO 
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APPENDIX  B  Three-Dimensional  Plot  Routine 

Introduction 

This  appendix  contains  the  program  for  plotting  the 
three-dimensional  variation  of  state  probabilities  of  a 
4-bit  programmable  counter.  Two  input  statistics  are 
varied  while  the  remaining  input  statistics  are  held  fixed. 
Also  included  is  a  brief  introduction  about  using  SYMVU, 
the  three-dimensional  plotting  routine. 

Plotting  Procedure 

The  three-dimensional  plotting  is  done  by  a  program 
called  SYMVU .  A  complete  description  of  the  capabilities 
of  the  program  can  be  obtained  from  the  SYMVU  MANUAL 
available  from  the  Laboratory  for  Computer  Graphics  and 
Spatial  Analysis,  Howard  University,  114  Memorial  Hall, 
Cambridge,  Massachusetts,  02138.  Below  we  give  a  brief 
description  on  how  a  plot,  can  be  obtained. 

The  information  to  be  plotted  must  be  stored  on  disk 
where  the  program  SYMVU,  based  on  data  specifying  size, 
viewing  angle,  and  distance  from  object  (3-D  plot)  generates 
a  plot  based  on  this  data.  Thus,  two  steps  are  involved. 
First  a  two-dimensional  array  P1K(I,J)  must  be  stored 
on  disk.  The  value  of  P1K(I,J)  is  the  z  coordinate  while 
the  integers  I  and  J  specify  the  x  and  y  coordinates 
(see  Figure  B.l).  That  is,  x=  (1-1)  *Ax-*-x0 ,  y= ( J-l) *Ay+y0 , 
where  Ax  and  Ay  are  the  x-axis  and  v-axis  increments  and 
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xQ  and  yQ  the  starting  values.  Thus,  if  the  function 
z=f(x,y)  is  to  be  plotted  we  must  calculate  the  array 
P1K(I,J)  as  follows: 

DO  500  1=1,  NPX 
X  =  (1-1) *DX  +  X0 
DO  500  J=l,  NPY 
Y  =  (J-l) *DY  +  Y0 
500  PlK ( I , J) =F (X , Y) . 

Now  to  store  P1K(I,J)  on  disk  we  do  the  following: 

WRITE (8)  NPX,  NPY,  RPI,  CPI,  RMIN ,  RMAX 
DO  44  1=1,  NPY 

44  WRITE ( 8 )  (PlK ( I , J) ,  J=l,  NPX) 

REWIND  8 

where  RPI  is  the  number  of  rows  per  inch,  CPI  is  the  number 
of  columns  per  inch,  RMIN  is  the  minimum  value  of  z=PlK(I,J), 
and  RMAX  is  the  maximum  value.  Rows  correspond  to 
variation  along  the  x  axis  and  columns  correspond  to  varia¬ 
tion  along  the  y  axis. 

Besides  the  above  information  transferred  to  SYMVU  by 
disk,  data  specifying  the  title,  number  of  columns  and  rows, 
viewing  angle/  etc.  must  be  provided  in  the  job  stream. 

A  typical  set  of  cards  required  for  obtaining  a  plot  are 
described  below. 
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Card  #1  :  Contains  title  of  plot  up  to  72  characters. 

Card  #2  :  Specifies  number  of  rows  and  columns. 

Cols  1-4  :  number  of  rows  right  justified 

Cols  5-8  :  number  of  columns  right  justified 

Col  16  :  line  type  (1  for  columns  plotted. 

2  rows  plotted,  4  diagonals 
plotted) . 

Card  #3  :  Controls  viewing  angle  of  plot. 

Cols  1-5  :  Altitude  in  degrees  (e.g.,  45°) 

Cols  6-10:  Azimuth,  the  desired  horizontal 
angle  of  viewing. 

Cols  11-  Width  in  inches  along  side  of  plot 
15:  that  is  width  of  x  axis. 

Cols  3-4  :  Height  in  inches 

Cols  26- 

35:  RMIN  minimum  z 
Cols  36- 

45:  RMAX  maximum  z. 

Note  that  columns  68,  72,  and  76  must  contain  a  1  in 
Card  #2. 

The  necessary  JCL  along  with  example  data  illustrating 
the  usage  of  the  above  cards  is  given  along  with  the  program 
listing.  Further  information  on  the  extensive  capabilities 
of  SYMVU  can  be  found  in  the  SYMVU  manual . 


1-212 


U  U 


111 


//  E*EC  FTGCG 

//C.srsu  CO  * 

C  PROGRAM  name  plctcnt 


c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 

c 


this  program  plots  the  state  probability  cf  a  counter  versus  the  • 

VARIATION  OF  T»0  OF  ITS  INPUT  STATISTICS  WHILE  THE  CTH£R  STATISTICS  • 
RE MA 1 n  F I XEC.  • 
CNSTAT  IS  A  ROUTINE  TnAT  RELATES  STATE  STATISTICS  TO  INPUT  STATISTICS 
R.L*PT  ARE  The  RESET •  LCAC.ANO  COUNT  ENABLE  STATISTICS  CF  THE  COUNTER 
A  IS  AN  ARRAY  CONTAINING  THE  PRESET  INPUT  STATISTICS.  • 
PIK(J.l)  IS  an  ARRAY  CONTAINING  Tm£  Z  COORDINATE  CORRESPONDING  TO  • 
x( j  )  .  AND  Y (  I  J  ♦  « 
npx  rs  the  NUMees  cf  points  on  the  x  axis.  • 

NPY  IS  THE  NUMBER  of  POINTS  ON  THE  r  AXIS.  • 

pm  in  ano  rmax  are  the  min.  ano  max.  values  cf  pikcj.ii  that  is,  z.  • 
PC  v  S  COORESPCNO  to  THE  X  AXIS  ANO  COLUMNS  TO  The  Y  AXIS.  • 
CPI  IS  the  number  of  COLUMNS/ I NCH  ANO  RPI  THE  NUMBER  OF  RG*S/lNCH.  • 
UNIT  a  IS  The  OISC  WHERE  PIKCJ.I)  IS  STORED  FROM  WHICH  THE  PROGRAM  * 
SYKVU  gbtains  the  plot  INFORMATION,  * 


DIMENSION  PIK(S0.50).A(256).PC(2S6J*eC(16).S(2S6) 
REAL  L 

RE  AC (1  , 1 1 0 ) N8 

READ!  1  .1201  (MiU  .*3  i  .  NB) 

REACI l  , l 30 ) R  «L  . PT 
1 \ 0  FCRMAT (12) 

120  FORMAT ( 1 EF5. 3) 

130  FORMAT ( 3F5. 3  ) 

N=  1 

CO  5  1  =  1  *  N0 

5  N=N*2 

RE  A  0  <  1  ,240)NPX,NPY 
2  A  0  FCPM AT (213) 

CX= 1 , O/NPX 
0Y= 1 ,0/NPY 
NPM  ®NPX  ♦  I 
NPY  1  =NPY  -f  1 
CO  500  I = l .NPX l 
PT  = (  I  -  1 ) *0X 
CO  500  J=l ,NPYI 
L  ■=  (  J  —  l  )  »  O  Y 

CALL  CNSUKQ.L.PT.S,  nB.PC.BC.  REST  ,A.n) 

PI K(  I , J ) =S( 2  > 

500  CONTINUE 
NCsNPYl 
NR=NPX 1 
RPI =2. 0 
CP  1  =  2.0 
RM  I  n=0  ,0 
Pm ax  =  0 .6 

»RITE(8)NR,NC.RPI  .CPI.PMIN.PMAX 
CC  44  J= I , NR 

44  »R 1 7  £ (  6)  (  P  I  K  (  J  .  I  )  .1=1  . NC ) 

REwlNO  a 

call  exit  ' 

ENO 


1-213 


118 


// C  .  FT  OSFOO  t  00  OSN=CCRT  1  .  0  1  SP  =  (  Ni£  «  .  P4  SS  )  . 

UNIT=0IS*  ,VQL =SER=RT I  222 . 

//  SPAC£=(  T?K  .  ( S. £  )  . R(_S£ I  . 

**  CC  S  =  (  fie  CF  *  =  V8S  ,  LR£CL=2  360  .  dL<S  I  ZS=  1  3000  .  auF-«o  =  1  ) 
//C.'TSIS  00  * 

4 

C  •  C  C • 3  0*3  0*5 

0.9  C.4  0.9 

40  4  0 

/» 

// S2  exec  symvo 

//C.NCSPLCT  00  SYS  CU  7  =C 
//C.iYSIN  00  • 

STATS  OF  CNTR 
'  4  0  40  *  2 

45.0340.0  4.0  3. C  0.6 

/» 

/  VG.OATA  00  OSS=£ORTt  .01  SP  =  Oi-0 

/  • 
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«*w a«s  »«  tumum  nua# 

1.0  INTRODUCTION  " 

The  advantages  of  cellular  arrays,  which  result  from  the  regularity  of 
their  iterative  structure,  have  been  sufficiently  documented  in  previous  studies 
[1-7],  and  memory  manufacturers  have  fully  exploited  many  of  their  unique 
features  to  produce  memories  with  highly  improved  device  densities,  production 
yields,  size,  cost,  speed,  reliability,  and  noise  characteristics.  Presently, 

IC  manufacturers  are  becoming  increasingly  interested  in  cellular  structures  as 
a  means  of  bringing  about  further  improvements  in  system  integration, 
reliability,  testability,  and  system  maintainability.  This,  of  course,  implies 
incorporation  of  cellular  logic  design  notions  into  the  design  of  what  has  been 
traditionally  known  as  random  logic  subsystems  which  include  control  units  and 
arithmetic  and  logic  units  of  digital  systems. 

There  are  three  main  reasons  why  random  logic  subsystems  have  remained 
largely  non-cel lular  in  form,  namely:  lack  of  design  standardization; 
inadequate  testing  procedures  for  fault  detection  and  fault  diagnosis;  and  poor 
maintenance  schemes  in  terms  of  self-reconfiguration  in  the  event  of  failure,  as 
well  as  in  terms  of  preventive  maintenance.  These  are  major  problem  areas  and 
are  currently  attracting  a  great  deal  of  attention  in  several  industrial  and 
university  laboratories.  This  interest  is  easily  justified  by  the  fact  that 
cost,  device  densities  and  yields  of  mass-produced  cellular  structures  using 
mature  technologies  have  greatly  improved  over  the  years,  and  we  find  ourselves 
now  in  the  comfortable  position  of  being  able  to  build  very  economically  into 
such  cellular  structures  redundant  functional  capability  which  one  could  use  to 
improve  system  integration,  system  testability  and  maintainability  and,  in 
general,  system  reliability  and  availability. 

In  recent  publications,  Manning  [6]  describes  certain  procedures  for 
automatic  testing,  configuration,  and  repair  of  cellular  arrays;  and  Page  and 
Marinos  [7]  propose  a  programmable  array  for  use  in  designing  synchronous 
sequential  machines  and  demonstrate  ways  for  actually  embedding  arbitrary 
finite-state  machines  in  such  arrays.  What  is  proposed  next  is  a  natural 
extension  of  these  two  independent  research  efforts,  and  it  is  based  on  the 
strong  belief  that  industry  will  recognize  the  many  advantages  of  using  cellular 
structures  throughout  a  digital  system  once  the  issues  of  array  standardization 
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(both  functional  as  well  as  structural),  testability  and  maintainability  have 
been  resolved  in  a  practical  and  cost-effective  manner.  This  paper  describes  a 
programmable  cellular  array  suitable  for  implementing  random  logic  with  built- 
in-test  (BIT)  facilities  in  a  way  which  is  a  natural  extension  of  the  overall 
system  design  process.  The  BIT  facility  imparts  to  the  cellular  structure 
on-line  fault  detection  and  correction  capability  and  is,  in  effect,  a  "hardware 
encoded"  version  of  well-known  information  encoding  procedures  relying  on  the 
same  basic  cell  used  to  configure  the  rest  of  the  cellular  structure. 

An  algorithmic  procedure  for  mapping  arbitrary  synchronous  sequential 
machines  with  "hardware  encoded"  random  logic  in  the  cellular  array  is  also 
presented. 


2.0  SEQUENTIAL  MACHINE  CHARACTERIZATION 


A  finite  state  machine  is  described  by  the  algebraic  structure 
M  =  <  X,  Z,  Q,  a,  u  > 


where 


X  =  a  finite  set  of  input  symbols  (x^,  x2,  .  .  .  ,  xn)  such  that 
x.j  £  (0,1) ,  i  -  l,  2,  .  «  .  ,  nj 

Z  =  a  finite  set  of  output  symbols  (z^ ,  z2,  •  .  .  ,  zp)  such  that 

Zj  e  (0,1) ,  j  =  1,  2,  .  .  .  ,  p; 

Q  =  a  finite  set  of  states  (qp  q2,  .  .  .  ,  q^)  defined  by  the 
state  variables  (y^  y2,  .  .  .  ,  ym)  such  that  m  >  log2t; 

6:  X  x  Q  into^Q  is  the  next-state  function 


co:  X  x  Q  ont<^  Z 
or  Q  onto^Z 


is  the  output  function 


The  general  form  of  the  excitation  and  output  functions  of  a  sequential 
machine  may  be  written  as  follows: 


Fr(xi>  x2’  •  •  •  »  ^2 *  •  •  •  ’  “  (D 

t 

1=1  fi,r(xl’  x2’  ‘  *  •  ’  xn5  qi 

where 

r  =  1,  2,  .  .  .  ,  m,  .  .  .  ,  m  +  p 
9i  3  *1  yZ  ’  •  *  V 

with  yj  denoting  the  state  variable  yj  either  in  its  complemented  or 
uncomplemented  form  (i.e.,  q^  denotes  a  min- term  of  the  state  variables 
yj,  j  s  1»  2,  •  •  •  ,  m. ) 


For  reasons  outlined  elsewhere  [7,8],  state  assignments  based  on  monotone, 
k-out-of-m  codes  will  be  utilized.  Among  the  many  advantages  offered  by  these 
codes,  the  one  of  interest  in  this  case  is  their  utility  in  error  detection,  and 
in  designing  fail-safe  sequential  machines  [9,10].  In  view  of  such  a  state 
assignment,  one  may  rewrite  equation  (1)  in  the  form 


F 


r 


where 


u  fi,r  (xl’  x2* 
i=l 


xn)  •  G.j  (m,k) 


(2) 


G-j (m,k)  =  yuyi2  •  •  •  yik 

and  y.j j  e^,  y2,  .  .  .  ,  ym) ,  j  =  1,  2,  .  .  .  ,  k. 


Equation  (2)  suggests  a  linear  array,  each  cell  of  which  is  algebraically 
described  by  the  function 


Ai  ,r 


g  .  +  A.  ,  +  f .  (x. ,  x0, 

,r  i-l ,r  l ,r  1  2 


xp)  G.  (m,k) 


(3) 


Figure 2.1  shows  the  structure  of  such  a  cell  with  an  r, -input  programmable 
universal  logic  module  { PULM-n)  implementing  the  function  fi  r  (x^, 

X2,  .  .  .  ,  xn).  The  PULM-n  unit  is  programmed  via  the  associated 
programming  register.  The  linear  cellular  array  shown  in  Figure  2  2  implements 
the  function  Fr  given  by  expression  (2),  and  the  two-dimensional  cellular 
structure  given  in  Figure  2.3  illustrates  a  cellular  array  capable  of  implementing 
any  required,  finite  number  of  excitation  and  output  fractions  Fr  necessary 
for  the  implementation  of  a  finite  state,  synchronous  sequential  machine.  One 
of  the  structural  advantages  of  the  array  shown  in  Figure  2.3  is  its  ability  to 
support  finite  state,  synchronous  sequential  machines  of  arbitrary  "state-space" 
cardinality  without  requiring  any  structural  changes  in  the  basic  cell  of  the 
array. 
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Fiaure  2.1 


Basic  Cell 


A0,1  -  0 


3 


CELL-1 


1 


1  =  g1, 1  ~  A0,  1  +  q1  *  f1. 1 


|Zyj  CELL-2 


J 


J  A  (t-2),  1  sg(t-2),1  “A(t-3),1  +  q(t-2)  *  f  (t-2),  1 


Vl).1=9(t-1).1  A(t-2)r  1  +q(t-1)  '  f(t-1>,  1 


BUS 


F-  =  Uq,.f.  . ,  OUTPUT  FUNCTION 
1  i— i  1  # 


Figure  2.2  A  Cellular  Cascade 
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3.0  DESCRIPTION  OF  BASIC  CELL 


PRECEDING  PAGE  BLANK* NOT  FILLED 


The  major  module  of  the  basic  cell  shown  in  Figure  2.1  is  the  so-called 
programmable  universal  logic  module  (PULM-n)  capable  of  realizing  any  switching 
function  of  n  binary  variables.  The  programmability  of  this  module  is  made 
possible  through  an  appropriate  field  in  the  programming  register,  while  the  n 
binary  variables  used  by  the  module  to  form  the  desired  n-variable  switching 
function  are  provided  via  an  input  selector  and  accessed  through  the  n-BUS  under 
the  control  of  the  programming  register.  Finally,  a  third  field  in  the 
programming  register  is  used  to  select  the  state  qi  associated  with  the  cell 
in  question. 

The  Input-Selector  and  State-Selector  units  receive  primary  input  and 
secondary  input  (or  state)  information  via  the  X-BUS  and  Y-BUS,  respectively. 
These  two  busses  may  be  arbitrarily  large  in  size  while  the  q-BUS  and  n-BUS, 
referred  to  earlier,  are,  for  practical  considerations,  of  significantly  smaller 
size.  In  the  case  of  the  n-BUS,  this  is  motivated  by  the  growth  in  size  of  the 
PULM-n  unit  as  n  becomes  large;  with  respect  to  the  q-BUS,  one  is  interested  in 
satisfying  the  state-space  of  a  machine  with  the  minimum  number  of  state 
variables.  For  K-out-of-m  codes  used  here,  the  choice  of  K,  which  denotes  the 
size  of  the  q-BUS,  must  be  such  that  it  produces  the  largest  possible  number  of 

states  from  the  m  state  variables  brought  in  via  the  Y-BUS.  Thus,  the  usual 

n 1 

choice  for  K  is  such  that  the  expression  l : — o-  is  maximized.  It  should  be 

k(  (k-m). 

noted  that  with  the  X-BUS  there  is  an  extra  line  known  as  the  “program  mode" 
line  used  for  controlling  the  programming  register,  and  its  specific  function 
will  be  revealed  shortly. 

A  unique  feature  of  the  proposed  basic  cell  is  the  dual  function  served  by 
the  X-  and  Y-BUSSES.  In  addition  to  their  .ia i n  function  of  importing  primary 
and  state  information  to  the  cell,  the«  also  serve  two  additional  functions: 

The  X-BUSS  is  used  to  program  the  programming  register,  provided,  of  course,  the 
cell  in  question  has  been  properly  addressed  via  the  Y-BUS  to  generate  the 
required  "program  enable"  control  signal;  and  second,  the  Y-8US  is  the  one 
responsible  for  addressing  uniquely  the  cell  of  interest  by  making  use  of  a 
unique  "cell  address  decoder".  The  dual  functions  served  by  the  X-  and  Y-BUSSES 
constitute  a  very  important  design  consideration  since  they  help  maintain  a 


low  pin-count  for  the  cell.  In  the  "program  mode"  the  cell  output  is 
disregarded. 

Another  important  feature  of  the  cell  in  Figure  2.1  is  the  fact  that  all  the 
incoming  information  is  reduced  or  "fully  decoded"  to  a  single-line  output  which 
is  very  important  from  the  standpoint  of  pin-count. 
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4.0  DESCRIPTION  OF  CELLULAR  ARRAY 


An  aggregate  of  basic  cells  as  arranged  in  Figure  2.2  forms  a  cellular  array. 
Each  cell  has  full  access  to  the  X-  and  Y-BUS,  and  function  realization  is 
effected  along  a  column.  The  upper  boundaries  of  the  array  are  set  to  zero,  and 
the  realized  function  along  each  column  is  output  as  Fi  and  represents  either 
an  excitation  or  output  function. 

Each  cell  in  a  column  is  programmed  to  account  for  a  specific  term  of  the 
function  which  is  implemented  in  a  sum-of-products  form.  For  functions  which 
are  independent  of  state  information,  the  "state  selector"  in  each  cell  is 
capable  of  providing  the  Boolean  constant  1  under  control  from  the  appropriate 
field  of  the  programming  register,  thus  facilitating  the  generation  of  product 
terms  not  requiring  state  information. 

The  cellular  array  described  in  this  study  utilizes  a  basic  cell  which  is 
functionally  more  complex  than  the  one  used  by  Page  and  Marinos  [7],  and,  as  a 
result,  it  leads  to  more  flexible  cellular  structures.  It  should  be  noted  that 
the  proposed  cellular  array  permits  localized  selection  of  both  state  variables 
and  primary  input  variables  and  facilitates  its  own  programmability  via  the 
primary  and  secondary  input  busses  X  and  Y.  Each  cell  in  the  array  is 
Individually  addressed,  and  the  array  is  assumed  to  obtain  its  state  information 
from  a  separate  memory  array.  In  the  sequel,  a  functionally  improved  basic  cell 
is  presented  which  allows  intercellular  information  transfer  from  each  cell  to 
all  of  its  four  neighbors,  thus  overcoming  certain  limitations  of  the 
one-directional  transfer  of  information  of  the  present  cellular  array.  This 
improved  cell  results  in  cellular  arrays  over  which  one  may  invoke  optimization 
procedures  resulting  in  more  efficient  utilization  of  the  cellular  structure. 

4.1  A  Procedure  For  Mapping  An  Arbitrary  Synchronous  Sequential  Machine 
Into  A  Cellular  Array 

The  algorithmic  procedure  which  follows  is  based  on  a  similar  procedure 
given  by  Page  and  Marinos  [7],  and  Page  [11]  and  it  is  formulated  in  a  way  which 
makes  its  mechanization  easy  to  carry  out.  A  programmed  version  of  the 
algorithm  is  available  and  typical  illustrations  making  use  of  the  program  are 
given  in  Appendix  1. 
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Using  symbolism  previously  defined,  one  may  present  the  algorithm  as  a 
five-step  procedure. 

Step  1 

Obtain  the  so-called  connection  matrix  of  the  sequential  machine  in  the 

form 


1 

r  C 


11 


j  .  .  .  t 

■  •  v 

c>j  •  : 


t  Lcti  •  •  •  cttj 


Next  State 


Present  State 


where 


=  'J 


’ij 


h  h 


«(xh,q.)  ■  q. 


The  entry  denotes  the  union  function  of  all  the  input  symbols  x^  which 
cause  a  transition  from  state  qi  to  state  qj. 


Step  2 

Obtain  the  so-called  output  matrix  in  the  form 

J  •  •  •  s  .  .  .  p  ^ -  Primary  Output  Lines 

all  •  •  •  alp' 

.  ais  .  . 

3tl  •  •  •  atp 

_  Present  StateJ 

where 

ais  =  ws^i} 

[j  xh  |  w$  (xh,qi )  =  1 

T'ne  entry  a^  denotes,  in  a  Moore-Machine,  the  binary  value  of  the  output 
line  "s"  when  the  machine  is  in  state  q^ •  In  the  case  of  a  Mealy-Machine,  the 
entry  a^$  represents  the  union  function  of  all  the  input  symbols  which  cause 
transitions  from  state  q^  to  other  states  resulting  in  an  output  pulse  on  line 
s.  It  should  be  pointed  out  that  the  above  formulation  allows  some  of  the 


and 


ais 


(Moore-Machine) 

(Mealy-Machine) 


U  - 


1 


II-T4 


output  lines  to  display  Mealy  behavior  and  the  remaining  Moore  type  behavior  in 
sequential  machine  design  in  which  both  types  of  output  behavior  are  present. 


Step  3 

(This  step  is  used  only  to  facilitate  the  theoretical  discussion  leading  to 
the  development  of  certain  rules,  and  not  for  the  purpose  of  actually  obtaining 
matrix  M^.  Consider  the  so-called  memory  excitation  matrix 


1 

1  . 
'mn 

.  .  j  . 

.  .  r 

mir 

t 

■ 

•  ™ij 

•  • 

t 

-mti 

.  .  . 

mtr. 

t 

Present 

State 

Memory  Element 


where  the  entry  m.j  is  a  functional  form  dependent  on  the  type  of  memory 
element  used,  and  analytically  expresses  the  relevant  excitation  term  of  the  jth 
memory  element  when  in  state  q^ ,  that  is 


mij  =  fij  (xi>x2,,,”xn)  • 


a)  Linear  delay  memory 

For  linear  delay  memory  element,  the  entry  m- .  is  given  by 

'  J 


,  (  ^txh.qn-) 

where  w  j  denotes  the  partition  block  of  the  state  space  identified  with  the 
uncomplemented  version  of  the  jth  state  variable.  Thus,  one  may  identify  the 
primary  inputs  xh  present  in  entry  as  those  responsible  for 
transitions  of  the  form 

q:(optional) 


(out  of  state  q^ )  as  far  as  state  variable  yj  is  concerned. 


b)  Trigger  flip-flop  memory 

For  trigger  flip-flops,  the  entry  m^j  is  given  by 


•>  1 

q.e7rj_*o(xh,q.)eirj 

°r  1 

q^Trj— ►6(xh,qi-)eB-i 

Here,  the  entry  is  the  union  function  of  those  primary  inputs  xh  which 
are  responsible  for  causing  transitions  from  state  qi  £irj  to  states 

1 

6  (xh,q-j)  eirj  or  vice  versa 


mij  =  U  xh*qi 
h 


Symbolically,  such  transitions  are  of  the  form 


(out  of  state  q^)  as  far  as  state  variable  yj  is  concerned. 


c)  Set-Reset  flip-flop  memory 

For  set-reset  flip-flops,  the  entry  m-j  is  given  by 


"I.-,  =  [m.  .(S) ,  m  (R)] 
J  1 J  ij 


where  m- j ( S )  is  the  "SET"  component,  and  j ( R )  is  the  "RESET" 

component. 


m,.(S)  =  U 
J  h 


0  1 
qi£Tj_^6(xh,qi  )-jrj ; 

the  x^' s  for  which  , 

q  -j  e w- j  — *-5(xh,  q i ) e *■] 

are  to  be  included  in  the 
union  function  optionally. 


The  entry  m^tS)  is  the  union  function  comprised  of  those  primary  inputs 
J  0 

xh  which  are  responsible  for  transitions  from  state  qi  to  states 

i 

5(xh,qi)£Tj , 


necessarily;  and  optionally  of  those  xh  such  that 
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1  i 

forq-jeirj  one  has  6(xh,q^  )e  ^  j  .  Symbolically,  such  transitions  are  of  the 
form 

Xh2  ’  Qj  (optional ) 


(out  of  state  q.j)  as  far  as  state  variable  y^  is  concerned. 


Similarly,  for  the  "RESET" 

m.  .(R)  =  U  x  -q 
TJ  h  h  L 


function  m-j(R),  one  has 

1  .  O 

qi£jrj_*.lS(xh,q.)£Xj  ; 

the  x^‘s  for  which 

qiexj__*MS(xh,q.)€xj 

are  to  be  included  in  the 
union  function,  optionally 


The  entry  j ( R )  may  be  described  in  a  way  analogous  to  the  ^ ( S ) 
function,  and  symbolically,  those  transitions  of  the  state  variable  y^  which 
contribute  to  the  function  j ( R )  are  of  the  form 


d)  J-K  flip-flop  memory 

For  J-K  flip-flops,  the  entry  m^  is  a  composite  entry  given  by 


=  [m.  .(J) ,  m.  . 

7J  ij 


(K)] 


where 


U 

h 


x  -q. 
h  \\ 


q^e*-]— ►6(xh,q  )eirj; 
the  xh  s  for  which  either 

in  i 

qi £7T j — ►6(xh,qi  )e»j 
or  q^/rj— ►<s(xh,q1  )exj 
are  to  be  included  in  the 
union  function,  optionally 
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The  description  for  the  mj.(J)  function  is  similar  to  the  description  of 
Vs1-  Symbolically,  one  is  interested  in  x^'s  responsible  for 
transitions  (out  of  state  of  the  form 


Similarly,  for  j ( K )  one  has 


mfj(K)  =  jj  vh 


Q 

qierj_*.5(xh,q.)€7r] ; 
the  xh's  for  which 
either  q^ewi— 5 (xh ,q^ )e7rj 
or  qi£rrj_*.6(xh,qi)£5rj 
are  to  be  included  in  the 
union  function  optionally. 


Symbolically,  one  considers  only  x^'s  responsible  for  transitions  (out  of 
q.j )  of  the  form 

xh3  •  qj (optional)  ^  .  q.(optiona|) 


The  above  formulations  provide,  in  effect,  the  rules  through  which  one  may  now 
proceed  in  a  systematic  way  to  obtain  the  excitation  functions  for  the  memory 
elements,  utilizing,  of  course,  the  information  contained  in  the  connection 
matrix.  Towards  this  end,  one  must  assign  k-out-of-r  type  codes  to  all  machine 
states  and  identify  all  the  states  in  which  the  jth  state  variable  (i.e.,  state 
variable  yj)  is  present  (i.e.,  yj  =  1)  and  associate  them  with  the  state 
partition  block  w  j ,  and  the  remaining  states  with  partition  block  *  j  . 


11-18 


In  order  to  facilitate  the  mechanization  of  the  algorithmic  process,  we 
make  use  of  the  transpose  matrix  C  which  assumes  the  form 


1  . 

.  i  .  .  .  t  -w 

1 

C1T 

. Ctl 

=  j 

• 

•  •  cij  •  •  •  : 

t 

1 

_ 

......  ctt_ 

Present 

State 


1 —  Next  State 

and  then  proceed  to  generate  the  matrix 


C*  =  C 


'1 


=  CT*  Q 


where  the  *  denotes  matrix  "multiplication"  in  an  AND-like  sense  ANDing  an 
entry  of  CT  with  a  corresponding  entry  of  Q.  Matrix  C*  is  in  effect  a  form  of 
"next-state"  matrix  of  the  system,  and  it  will  be  utilized  in  a  way  which  leads 
to  a  set  of  elemental  excitation  matrices  from  which  by  direct  application  of 
the  symbolic  rules  developed  for  the  various  memory  elements,  earlier,  one  may 
obtain  the  corresponding  excitation  functions. 


Step  4 

The  elemental  excitation  matrix  is  assoctated  with  a  state  variable,  say, 
and  has  the  form 


ej  ■ 


o 

t r  . 

J 


1 

ir . 

J 


t_, 


'OOJ 


■ol  j 


1 


'loj 


•llj 


-  Present 
Partition  Block 


where  the  entry  e 


pqj 


Next  Partition  Block 

.  P,q  e  CO ,  1] , 


denotes  the  excitation  required  by  state  variable  yj  to  perform  the  transition 

from  state  p  to  state  q.  More  specifically,  e^j  is  the  excitation  which, 

if  applied  when  yj  =  l,  will  cause  a  change  in  the  state  of  y.  to  y  •  =  0. 

J  3 
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In  order  to  obtain  the  elemental  excitation  matrices,  we  must  first  produce  the 
encoded  state  vector 


G(r,k)  = 


rGi(r,k)1 

Gj(r.k) 


LGt(r,k) J 


where 


Gj ( r,k)  =  q.  =  y  y.  ...  y, 

with  r  denoting  the  number  of  available  state  variables  and  \  =  1,2,. ..,t.  Any 
other  arbitrary  state  encoding  could  have  been  used  just  as  well.  For 
analytical  convenience,  the  entries  of  G(r,k)  will  be  replaced  by  their 
corresponding  k-out-of-r  codes.  Thus,  one  may  view  G(r,k)  as  a  binary  matrix  of 
t  rows  and  r  columns  with  the  rows  denoting  states  and  the  columns  being 
identified  with  the  r  state  variables.  Multiplying  next,  in  an  AND-OR  sense, 
matrix  C*  with  G(r,k)  and  also  G(r,k),  the  complement  of  G(r,k),  one  has  two  new 
matrices,  namely, 


0  =  C*  ®  G(r,k) 


and 


D1  =  C*  0  G{ r ,k ) 

where®  denotes  AND-OR  matrix  multiplication  DQ  and  contain  all  the 
information  needed  to  obtain  the  elemental  excitation  matrices.  More 
specifically,  DQ  provides  the  excitations  required  by  state  variable  yj, 
being  presently  in  any  of  the  stats  in  which  yj  =  0,  to  assume  its  uniquely 
assigned  next-state  value.  Similarly,  provides  the  excitations  required  by 
state  variable  yj,  being  presently  in  any  of  the  states  in  which  y^  =  1,  to 
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assume  its  uniquely  assigned  next-state  value.  To  obtain,  next,  the  elemental 
excitation  matrices,  Ej,  we  form  the  matrices 


HRj  and  no¬ 


where  Hrj  is  a  two-row  matrix  in  which  the  first  row  is  the  jth  column  of 
G(r,k)  transposed  and  the- second  row  is  the  jth  column  of  G(r,k)  transposed.  In 
the  case  of  H  •,  this  is  a  two- column  matrix  formed  by  taking  the  jth  column 
of  Dq  first  and  the  jth  column  of  0^,  secondly.  The  elemental  excitation 
matrix  is  now  given  by 


Ej  ~  HRj®Hcj 


where 


j  =  1.2, ... ,r 

The  derivation  of  the  elemental  excitation  matrices  is  independent  of  the 
type  of  memory  element  used  and  it  is  only  through  application  of  previously 
developed  rules  that  one  may  interpret  the  entries  of  Ei  for  obtaining  the 
specific  excitation  functions  required  by  the  respective  memory  element,  j.  In 
the  case  of  a  linear  delay  element,  j,  the  appropriate  rule  states  that  its 
excitation,  Dj,  is  given  by 

Dj  =  e01j  +  ellj 

For  a  trigger  flip-flop,  the  rules  dictate  the  excitation 

Tj  =  e01j  +  e10j 

For  the  Set-Reset  flip-flop,  the  rules  result  in  a  set-function 

Sj  =  e01j  +  ellj 

with  the  term  e^j  used  optionally;  and  a  reset-function 
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Rj  =  e10j  +  e00j 

with  the  term  eggj  used  optionally.  Finally,  for  the  J-K  flip-flop,  the 
pertinent  rules  yield 

Jj  =  e01j  +  (e10j  +  ellj)  > 
with  the  term  (e^  +  ellj^  used  optionally;  and 

Kj  "  elOj  +  ^e01j  +  e00j  ^  ’ 

with  the  term  (e0ij  +  eggj)  used  optionally.  Having  obtained  in 

this  manner  the  excitation  functions  for  all  memory  elements  j  one  has,  in 

effect,  determined  the  entries  of  matrix  M^  since  the  union  function 

t  t 

Umu  -  U  fu  (x,,x? . xn) 

1=1  1=1 

is  by  definition  the  excitation  function  of  the  jth  memory  element. 


Step  5 

Obtain  the  output  function  matrix 


where  zp  denotes  the  jth  output  function.  As  stated  previously,  the  output 
may  be  either  of  the  Mealy  or  the  Moore  type  or  even  a  combination  of  the  two. 
In  any  case,  the  Z-matrix  is  easily  obtained  as 

Z  =  WT  G(r,k) 


where  WT  is  the  transpose  of  W  and  G { r , k )  denotes  the  state  encoding  vector  as 
defined  earlier.  That  is. 
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G(r,k)  = 


yi  yi  •••yi 

4  'l  7k 


yt  yt  • 
ll  r2 


As  it  was  stated  previously,  the  choice  of  state  encoding  is  quite  arbitrary 
with  the  selection  of  G(r,k),  in  this  case,  favored  by  various  design 
considerations  dictated  by  the  cellular  structure  under  consideration. 

The  above  procedure  is  quite  general  and  easily  programmed  to  synthesize 
any  arbitrary  synchronous  sequential  machine  through  the  use  of  matrix 
manipulations  based  on  the  connecti on  and  output  matrices  of  the  sequential 
machine. 


4.2  Illustration  of  Mapping  Procedure 

The  following  state  transition  table  describes  the  sequential  machine  to  be 
embedded  into  the  cellular  array  discussed  earlier. 


Table  4.1  Machine  State  Transition 


Present 

State 

Y  INPUT  Y 

X1  X2 

Level 
Dutput  ,z 

ql 

i  ql/1 

q5/0 

0 

q2 

v° 

q3/0 

1 

q3 

q2/o 

V1 

0 

q4 

V 

q3/0 

0 

q5 

q3/0 

q4/o 

1 

Next  State/Output 
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Step  1 

From  Figure4.1  one  obtains  the  corresponding  connection  matrix 


C  = 


0 

0 

0 


0  0  0  X2 

0  X2  0  0 

X1  o  X2  0 

0  X1+X2  0  0 

0  X1  X2  0 


Step  2 

From  Figure  4  one  may  also  obtain  the  corresponding  output  matrix 


0 


L  o 

noting  that  the  sequential  network  has  a 
line. 


0 

1 

0 

0 

1 

pulse  output  line  and  a  level  output 


Step  3 

Obtain  the  C*  matrix 


C*  =  CT*Q  or 


'X1 

X1 

0 

0 

o' 

‘  q 

i 

c*  = 

0 

0 

X1 

0 

0 

★ 

q 

2 

0 

X2 

0 

Xl+X2 

X1 

q 

3 

0 

0 

X2 

0 

x2 

q 

4 

0 

0 

0 

0 

q 

5  _ 

X1 

q2 

0 

0 

0 

- 

0 

0 

Xlq3 

0 

0 

= 

0 

X2 

q2 

0  ( X  ^X2  )q^  X 

0 

0 

X2q3 

0 

X2q5 

X2ql 

0 

0 

0 

0 
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Example  Array 


Step  4 

In  order  to  obtain  the  elemental  excitation  matrices,  we  must  first  decide 
on  a  specific  state  encoding  which,  in  this  case,  we  assume  to  be  a  "2-out-of-4‘ 
with  codes  assigned  to  states  as  follows: 


G(4,2)= 


1 

CM 

>r 

rqr 

y1  y3 

q2 

yl  y4 

— 

q3 

y2  y3 

q4 

y2  y4 

q5 

The  corresponding  binary  form  of  matrix  G(4,2)  is 


G(4,2)= 


1 

0 

0 

1 

1 


0 

1 

0 

1 

0 


Next  we  construct  the  auxiliary  matrices,  using  the  binary  form  of  G(4,2), 


0Q  =  C*  0  G(4,Z) 


01  =  C*  ®  G(4, 2 ) ; 

that  is 


0 

xlq2 

xlql 

Xlql+Xlq2 

0 

xlq3 

xlq3 

0 

(x1+x2)q4+x1q5 

x2q2 

x2q5 

x2q2+(x1+x2)q4 

x2q5 

x2q3 

x2q3+x2q5 

0 

0 

0 

X2ql 

x2ql 

11-26 


"  xlql+xlq2 

xlql 

xlq2 

0 

xlq3 

0 

0 

xlq3 

o 

II 

x2q2 

(xl+x2)q4+xlq5 

x2q2+(x1+x2)q4 

x2q3 

x2q5 

0 

*2^  3+x2cl 

x2ql 

x2ql 

0 

0 

Next,  form  the  second  set  of  auxiliary  matrices  H0_.  and  H_,- ,  where 

KJ  cj 

j=l,2,3,4.  That  is, 


0  0  0  1  1 
1110  0 


0  110  0 
10  0  11 


0  xlql+xlq2 

0  xlq3 

( xl^"^2  ^q4^"xlq5  x2q2 
x2q5  x2q3 

0  x2ql 


Xlq2  xiql 

xlq3  0 

x2^2  ' Xl+X2 ' q4+xlq5 

x2q3  x2q5 


HR3 


10  10  1 
0  10  10 


C3 


xlq3 

xlq5 

x2q3+x2q5 


x2ql 


xlq2 

0 

X2d2+( xi+x2 'q4 
0 

0 
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and  assuming,  for  pedagogical  purposes,  the  first  element  to  be  a  linear  delay; 
the  second,  a  trigger  flip-flop;  the  third,  a  set-reset  flip-flop;  and  the 
fourth,  a  J-K  flip-flop.  One  may  interpret  the  four  elemental  excitation 
matrices  correspondingly  using  appropriately  developed  rules  to  obtain 


°1  =  e011  +  elll  or 

D]  =  (x1+x2)  q4  x  x^  +  x1q1  +  (x.+x2)q2  +  x]q3 

T2  =  e012  +  el 02  0r 

T2  =  xlq2  +  X2q3  +  ^X1  +x2^q4  +  xlq5 

S3  =  e01 3  +  el 1 3 
R3  =  el 03  +  e003  or 

S3  =  (xi+x2)q3  +  x2q5 

R3  =  xlql  +  x2q2  +  ^xi+x2^q4  +  ( ^xl+x2^ql  +  xlq5  } 

•Klptiona1  Term 

J4  =  e01 4  +  (e104+e114) 

K4  eT04  +  ^e014+e004^  0r 

J4  =  x^  +  x2q2  +  (x1+x2)q4+  {  \  +  x2q5  +  xl95  \ 

t.  Optional  Term 

K4  ■  (x,*x2) q3  *  x2q5  *  j  *  x^  *  (x,«2)q4  ♦  x,q,  } 

£_  Optional  Term 
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Step  5 

In  order  to  obtain  the  output  function  matrix,  we  make  use  of  matrix  W  and 
G(r,k);  that  is. 


or 


Z  »  W  ©  G(r,k) 


^1 

yl 

yl 


Z1  zPul se  xlyly2  +  x2yly4  +  xly2y3 

z2  =  "Level  =  yly3  +  y2y4 
or  equivalently, 


H,  ■  x,q,  ♦  x2q3  *  x,q4 

W  15 

Using  next  the  cellular  cascade  of  Figure  2.2,  the  array  form  of  Figure  2.3, 
and  assuming  the  postulated  memory  elements,  one  obtains  the  cellular  array 
implementation  shown  in  Figure  4.1  for  the  above  example.  In  this  example  only 
the  Y-BUS  is  shown  with  the  X-BUS  implied  and  each  row  of  the  array  associated 
only  with  one  state  as  designated  on  the  right  side  of  the  array.  This  need  not 
be  so  since  each  cell  permits  the  realization  of  any  state  code. 
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1  -  ■  ■  n* 


The  array  implementation  in  Figure  4.1  requires  5  X  3  =  40  cells  of  which  only  24 
are  actually  used.  The  unused  array  capacity  may  be  utilized  as  spare  or 
standby  resource  to  be  used  for  system  repair  or  possibly  for  “hardware 
encoding"  the  array  for  purposes  of  fault-detection  and  fault-correction. 
Approaches  are  presently  investigated  for  reducing  as  well  as  optimizing  in 
certain  ways  the  location  of  unused  cells  (i.t  ,  zero  entries)  in  the  array,  and 
the  results  of  this  work  will  be  reported  in  the  near  future.  Methods  of 
"hardware  encoding"  arrays,  such  as  the  one  in  Figure  4.1,  will  be  discussed  in 
the  sequel . 

4.3  Cellular  Arrays  with  Hardware  Encoded  BIT  Facilities 

The  term  "hardware  encoding"  is  used  to  mean  the  process  of  mapping,  in  a 
systematic  way,  any  of  the  well-known  information  encoding  schemes,  used  for 
error  control,  into  the  hardware  structure  of  a  cellular  array. 

The  manner  in  which  such  a  mapping  is  carried  out  is  greatly  simplified  by 
assuming  that  all  the  cells  of  a  row  are  programmed  to  receive  the  same  state 
code.  This  is  only  a  topological  and  not  a  functional  restriction  imposed  on 
the  machine  which  is  embedded  in  the  cellular  array  and  it  is  made  for  the  sake 
of  analytical  convenience.  Thus,  the  mapping  of  a  sequential  machine  into  a 
cellular  array,  using  the  algorithm  presented  earlier,  results  in  a  cellular 
machine  structure  in  which  each  row  is  uniquely  associated  with  a  machine  state, 
except  in  the  case  of  state  splitting  to  be  discussed  later. 

Figure  2.3  illustrates  a  cellular  arrayinwhich  the  i^  row  is 
associated  with  machine  state  q...  The  busses  and  other  details  of  the 
cellular  array  are  omitted  for  the  sake  of  clarity.  The  four  leftmost  columns 
of  the  array  are  used  to  implement  machine  functions  (i.e.,  excitation  and 
output  functions)  while  the  remaining  three  (i.e.,  Fcp  FC2  and  F^) 
denote  the  built-in  check  functions  employed,  in  this  case,  to  encode  the 
information  carrying  functions  F^,  F2,  F3  and  F4  according  to  the  well- 
known  single-error  correction  Hamming  code.  These  checking  functions  are 
implemented  in  the  last  three  columns  of  the  array  in  a  manner  similar  to  that 
used  to  form  any  other  machine  function.  The  resulting  array  is  one  with 
"hardware  encoded"  BIT  facilities  that  make  continuous  and  non-interfering 
monitoring  of  the  encoded  output  (i.e.,  F1  F2  F^  F4  F£l  Fc2 
FC3 ) ,  using  standard  error  checking  schemes,  possible. 
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Although  the  illustration  in  Figure  2.3  uses  a  single-error-correcting 
Hamming  code,  other  encoding  schemes  may  be  just  as  easily  employed  by  utilizing 
the  appropriate  relations  which  must  hold  between  the  "information  cell" 
function  f.-  's  and  the  "checking  cell"  functions  f_.  _  • 1  s .  For 
the  single-error-correcting  Hamming  code  used  in  Figure  2.3,  the  well-known 
relationships  are  given  by  the  equations 


f . 

i  .ci 
^i  ,C2 


f . 


1  ,C3 


f,  , 

© 

f . 

0  f- 

1  ,2 

1 

f . 

© 

f . 

S  f- 

1  1 1 

1,3 

1 

© 

fi,3 

©ff 

,4 


,4 


(4) 


assuming,  of  course,  even  parity.  The  above  equations  prescribe  the  respective 
"checking  cell"  functions  that  must  be  programmed  so  that  when  the  machine  is  in 
state  qr,  the  rth  row  of  the  array  is  "hardware  encoded"  in  accordance 
with  the  coding  scheme  of  interest. 

In  the  case  of  a  combinational  (i.e.,  memoryless)  network,  the  checking 
functions  are  realized  in  a  manner  similar  to  the  sequential  network  case  by 
assuming  the  network  as  being  a  one-state  machine.  Whenever  the  functional 
complexity  of  a  machine  exceeds  the  resources  of  a  row  in  a  cellular  array,  then 
more  than  one  row  may  be  associated  with  a  single  state  resulting  in  what  we 
have  previously  referred  to  as  state  splitting. 

T approach  outlined  above  for  realizing  BIT  facilities  is  compatible  with 
LSI  technologies,  and  it  mak^s  full  utilization  of  well-known  information 
encoding  schemes  used  for  error  detection  and  diagnosis  in  digital  systems.  It 
is  worth  noting  that  "hardware  encoding"  BIT  facilities,  as  proposed  here,  do 
not  require  specially  designed  hardware,  and  they  are  incorporated  into  the 
overall  system  in  a  way  that  makes  them  a  natural  extension  of  the  non-encoded 
machine  structure. 

In  the  specific  case  of  the  example  of  Figure  4.1,  encoding  of  the  8-BIT 
information  word,  comprised  of  six  bits  (i.e.,  six  columns)  for  implementing  the 
excitation  functions  and  two  bits  (i.e.,  two  columns)  for  realizing  the  output 
functions,  according  to  a  single-error  correction  code  results  in  the  array 
shown  in  Figure  4. 2. This  so-called  "hardware  encoded"  cellular  array  utilizes 
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four  additional  columns  and,  of  course,  an  appropriate  Hamming  decoder  (i.e., 
checker)  monitoring  the  12-bit  output  from  the  cellular  array.  The  Hamming 
decoder  may  be  a  standard  unit  of  specified  word  length  and  several  of  them 
could  be  used  for  on-line  monitoring  of  cellular  arrays  of  arbitrary  size. 

Figure  4.2  displays  also  the  use  of  a  check  attached  to  the  Y-BUS  which  is 
capable  of  on-line  monitoring  of  the  state  vector  which  we  assume  to  be 
appropriately  encoded.  In  the  example  of  Figure  4.2  it  is  assumed  that  the  state 
vector  is  encoded  as  "2-out-of-4"  code.  In  this  specific  instance,  the  state 
vector  checker  may  be  designed  to  be  a  totally  self-checkable  unit  [9]. 


Figure  4.2  Example  of  "Hardware  Encoded"  Cellular  Array 


Using  an  approach  analogous  to  that  employed  to  obtain  the  relationships 
given  by  Equation  (4),  one  may  now  show  that  for  even  parity  and  eight 
information  bits  the  required  checking  functions  to  be  used  for  a  Hamming 
single-error  correction  encoding  are: 
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For  purposes  of  illustrating  the  use  of  Equation  (5),  consider  the  case  t=3  as 
it  applies  to  Figure  4.2.  Since 


3,1  =  X1 

f3,2  =  X2  f3,3  =  Xl+X2 

f3,4  -  0 

3,5  =  0 

f3,6  =  Xl+X2  f3 ,7  =  x2 

f3 ,8  =  °* 

the  resulting  expressions  are, 

^3  Cl  =  x-| ®x2®^®°®x2  =  X1 

f3  C2  =  x]®(xi+x2^®°®^x]+x2^®x2=X]®X2 

f3,C3  =  *2e(x1+x2)®°«0  = 

f3  c4  =  0@(x1+x2)®x2®0  =  X]x2 


The  remaining  entries  to  be  programmed  into  the  checking  portion  of  the  cellular 
array  are  obtained  in  a  similar  manner. 
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5.0  AN  ALTERNATE  BASIC  CELL  DESIGN 

It  was  previously  stated  that  one  of  the  disadvantages  of  the  basic 
cell  described  earlier  was  the  fact  that  it  could  only  pass  information 
to  the  cell  below  and  thus,  in  many  instances,  could  result  in  a  large 
number  of  array  cells  not  being  utilized.  Even  though  this  could  be 
viewed  as  reserve  capacity  (i.e.,  spare  cells)  in  the  column  in  which 
they  appear,  they  are  still  of  no  use  to  other  columns  where  they  might 
be  needed,  and  therefore  some  means  of  exercising  greater  control  over 
their  allocation  is  very  much  in  order. 

Figure  5.1  shows  an  alternate  cell  design  which  imparts  increased  con¬ 
trol  capability  to  the  cellular  structure  over  individual  cells.  The 
difference  between  this  cell  and  that  shown  in  Figure  5.1  is  the  fact  that 
its  programming  register  has  a  fourth  field  through  which,  using  an  appro¬ 
priate  selector,  one  may  select  for  cell  input  the  output  of  one  of  its 
four  immediate  neighbors.  Furthermore,  the  output  of  the  cell  is  broad¬ 
cast  to  all  of  its  four  immediate  neighbors,  and  it  may  be  selected  by  iny 
and  all  of  them  as  their  input  according  to  need. 

Functionally,  both  cells  are  designed  around  the  same  logical  ex¬ 
pressions  developed  earlier  and  differ  only  in  intercell  communica' ; on 
capabilities.  Significant  progress  towards  developing  algorithmic  oro- 
cedures  which  take  into  account  the  enhanced  intercell  communication  capa¬ 
bility  of  the  new  cell  has  been  made  and  will  be  reported  in  the  rear 
future. 
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6.0  CELLULAR  ARRAY  IMPLEMENTATION  OF  A  MICROPROCESSOR  SYSTEM 


This  section  offers  a  preview  of  a  study  which  has  been  under¬ 
taken  to  demonstrate  the  utility  of  cellular  arrays  as  a  design  tool 
for  realizing  digital  systems  with  built-in-test  facilities.  In  order 
to  draw  a  meaningful  comparison  in  terms  of  system  performance,  it  was 
decided  to  utilize  a  popular  LSI  chip  of  significant  complexity  and  have 
it  implemented  in  a  cellular  array  structure. 

The  LSI  processor  chosen  is  the  Intel  8080,  and  the  mapping  of  its 
hardware  organization  on  the  cellular  array,  as  presently  planned,  follows 
the  functional  array  segmentation  shown  in  Finure  6.1.  The  choice  of  micro¬ 
processor  chip  is  not  viewed  as  critical,  and  its  selection  in  this  case 
was  based  primarily  on  our  greater  familiarity  with  the  Intel  8080  over 
other  possible  choices.  It  should  be  pointed  out  that  in  Figure 
ommitted  memory  and  register  facilities. 


Figure  6.1  A  Proposed  Cel  1 ul ar  A rray  Organization  for 
a  Microprocessor  Unit. 

A  brief  functional  description  of  the  various  array  segments  shown  in 
Fi gure  6.1  foil ows : 

ALU-uni t:  The  ALU-unit  performs  the  arithmetic  and  Ionic  operations 
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such  as  ADD,  INCREMENT,  XOR,  etc.  The  Y-8US  information  from  the 
,"ALU  Control"  unit  determines  the  operation  to  be  performed  on  the 
data  transferred  from  designated  registers  via  the  X-BUSS  and  the 
CARRY'S  output  goes  directly  to  the  X-BUS  so  that  a  look-ahead  of 
4  is  utilized. 

D-BUS  control  unit:  It  generates  signals  for  the  control  of  infor¬ 
mation  flow  from  ALU  to  various  registers. 

X-BUS  control  unit:  It  generates  signals  for  the  control  of  infor¬ 
mation  flow  from  various  registers  to  the  X-BUS. 

ALU-Control  unit:  It  generates  and  broadcasts  control  signals  to  the 
ALU  unit  via  the  Y-BUS. 

Master-Control  unit:  It  generates  internal  machine  states  and  deter¬ 
mines  the  machine  cycle  to  be  carried  out  based  on  op-code  and  pre¬ 
sent  state  information. 

The  BIT  facilities  in  the  array  of  Figure  6.1  are  implicit  and  the  total 
width  of  the  cellular  structure  for  the  Intel  8080  microprocessor,  includ¬ 
ing  single-error  correction  capability,  is,  according  to  preliminary  results, 
equal  to  about  forty  columns. 
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7.0  RESULTS  AND  CONCLUSIONS 


A  year  (or  so)  ago  we  undertook  the  task  of  developing  a  set  of  basic 
tools  for  use  in  implementing  built-in-test  facilities  in  digital  systems. 

It  was  stipulated  that  the  BIT  facilities  should  be  capable  of  testing  the 
system  on-line  continuously  and  without  interfering  with  any  of  the  normal, 
ongoing  operations  of  the  system.  As  a  secondary  objective,  it  was  also 
considered  very  useful  to  arrive  at  BIT  structures  which  one  could  implement 
without  the  need  for  special  hardware;  in  other  words,  the  BIT  facilities 
should  be  a  natural  extension  of  the  overall  system  design  process  utilizing 
the  same  modules  used  by  the  rest  of  the  system.  Another  very  important 
consideration,  also,  was  the  fact  that  all  systems  with  BIT  facilities 
should  have  the  ability  not  only  to  detect  but  also  to  locate  faults  and 
then  proceed  to  either  mask  or  overcome  such  faults  via  an  appropriate  strat¬ 
egy  of  system  reconfiguration. 

The  basic  cell  which  we  have  proposed  and  the  resulting  cellular  arrays 
satisfy  all  the  aforementioned  design  objectives,  and  the  notion  of  "hard¬ 
ware  encoded"  cellular  arrays  offers  a  new  design  tool  in  introducing 
routinely  BIT  facilities  into  a  digital  system.  An  additional  advantage  of 
the  cellular  array  we  have  proposed  is  the  ease  with  which  one  can  design 
into  a  system  reconfiguration  capability  either  for  the  purpose  of  overcoming 
faults  or  for  enhancing  functional  system  flexibility.  Finally,  "hardware 
encoded"  cellular  structures  and  state-encoding  schemes  of  the  K-out-of-n 
type  make  possible  the  design  of  self-checkable  checkers  for  on-line  monitoring 
of  the  state-space  and  the  output  of  cellular  arrays. 

Our  research  findings  to-date  point  to  several  problems  of  immediate 
research  interest.  The  order  in  which  we  present  these  problems  in  the  sequel 
indicates  the  sequence  in  which,  we  feel,  they  should  be  undertaken  if  we  are 
to  demonstrate  the  utility  and  practical  implications  of  our  work  in  cellular 
arrays.  We  believe  that  such  an  objective  at  this  point  is  justified,  in  view 
of  the  basic  knowledge  gained  from  our  study  of  cellular  structures,  and  we 
propose  that  reduction  of  our  research  findings  to  "physical  realizations"  be 
undertaken  promptly  in  order  to  determine  the  manner  in  which,  and  also  the 
extent  to  which,  these  findings  have  impacted  the  way  we  design  digital  modules 
or  systems  and  their  important  characteristics  such  as  reliability,  testability, 
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maintainability,  functional  flexibility,  speed,  size,  cost  and  production 
yields. 

One  way  of  evaluating  the  cellular  structures,  investigated  in  previous 
work,  is  by  utilizing  those  structures  as  the  basis  of  designing  digital  sub¬ 
systems  utilized  in  the  implementation  of  well -understood  computer  architec¬ 
tures.  As  a  starting  point,  we  propose  that  an  architecture  similar  to  that 
employed  in  popular  microprocessor  chips  be  utilized  to  organize  a  micropro¬ 
cessor  or  a  microcomputer  system  using  cellular  arrays  of  the  type  investigat¬ 
ed  earlier.  The  importance  of  this  specific  undertaking  stems  from  the  fact 
that  it  could  be  used  as  the  basis  for  addressing  a  number  of  relevant  ques¬ 
tions  through  which  we  can  firmly  establish  the  utility  of  cellular  structures 
in  digital  systems  design. 

The  relevant  questions  of  immediate  interest  to  us  may  be  stated  as 
follows: 

Question  -  1  To  what  extent  do  design  approaches  based 
on  cellular  arrays  influence  overall  system  reliability, 
testability,  and  maintainability? 

Here  we  propose  to  study  the  trade-offs  between  a  real  design  configura¬ 
tion  utilizing  conventional  design  tools  and  its  corresponding  realization 
which  is  based  on  the  programmable  cellular  structures  which  we  have  describ¬ 
ed  in  earlier  reports  [7].  System  reliability  will  be  determined  parametri¬ 
cally  in  a  way  which  accounts  for  the  fact  that  in  the  proposed  programmable 
cellular  array  one  may  allocate  resources  (i.e.,  columns  of  cells  or  just 
simply  cells)  for  the  purpose  of  realizing  built-in-test  (BIT)  facilities  in 
various  different  ways  depending  on  the  type  of  "hardware  encoding"  chosen, 
the  way  the  cellular  array  is  functionally  segmented,  and  the  budgetary  con¬ 
straints  which  are  usually  imposed  on  the  designer  of  such  a  system  The 
budgetary  constraints  may  be  in  terms  of  power  requirements,  physical  size, 
speed,  cost,  etc.  An  additional  parameter,  of  course,  is  the  extent  to  which 
we  wish  to  protect  out  system  against  the  threats  of  a  postulated  fault  environ¬ 
ment  (i.e.,  fault  coverage).  Encoding  of  the  state-space  and  "random  logic" 
portions  of  the  system  for  error  detection/correction  will  also  be  another 
very  important  consideration. 

As  one  can  easily  deduce,  the  problem  we  are  dealing  with  is  an  optimi- 
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zation  problem  involving  a  number  of  discrete  parameters  such  as  number  of 
columns  used  for  error  detection/correction  in  the  cellular  structure,  ana 
the  number  of  state  variables  required  for  encoding  the  state -space.  A  form 
of  branch  and  bound  technique  will  be  used  to  obtain  the  solution  to  this 
problem.  An  alternate  approach,  of  course,  would  be  to  approximate  the 
discrete  problem  by  a  continuous  one,  proceed  to  estimate  the  error  committed 
by  such  an  approximation.  The  objective  function  in  this  optimization  process 
may  be  either  the  mean-time  to  system  failure  or  any  measure  of  effectiveness 
that  relates  to  system  avai labi 1 ity,  mean-time  to  detect  errors ,  throughput 
rates,  etc. 

System  testability  is,  of  course,  another  very  important  consideration, 
and  the  fact  that  a  design  cellular  array  is  more  amenable  to  systematic 
testing  than  subsystems  utilizing  random  control  logic  should  prove  very  use¬ 
ful.  To  what  extent,  however,  uniformity  in  structure  proves  useful  in  the 
case  of  a  system  configured  with  cellular  arrays  of  the  type  investigated  in 
our  previous  work  remains  to  be  seen. 

Finally,  system  maintainability  will  be  addressed  at  two  levels.  First, 
through  the  use  of  built-in  spares  in  the  cellular  array,  and  secondly,  via 
system  reconfiguration  in  the  event  of  failure  or  perhaps  a  combination  of  the 
two.  Graceful  degradation  in  system  performance  will  be  central  in  all  our 
considerations  involving  issues  of  system  maintenance. 

Question  -  2  To  what  extent  do  design  approaches  based 
on  cellular  arrays  influence  system  parameters  such  as 
speed,  size  and  power  consumption? 

The  answers  to  this  question  will  determine  the  adequacy  of  the  basic 
cell  used  and  could  very  well  result  in  design  changes  to  the  present  cellular 
structure.  The  idea  here  is  to  develop  a  type  of  cell  which  is  not  only  easily 
realizable,  but  one  which  has  also  the  functional  capability  of  serving  in  a 
competetive  way  as  the  basic  building  block  for  designing  other  more  complex 
and  wel 1 -understood  computational  structures. 

System  speed,  size, and  power  consumption  will  also  depend  on  how  one 
organizes  (i.e.,  maps)  a  machine  structure  on  a  cellular  array.  The  mapping 
procedure  which  we  developed  for  this  purpose  in  previous  work  [7  ]  will  be 
used  to  make  the  required  comparisons  between  conventionally  designed  systems 
and  systems  configured  with  cellular  arrays. 
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Question  -  3  To  what  extent  do  design  approaches 
based  on  cellular  arrays  improve  functional  system 
flexibility? 

Functional  flexibility  here  refers  to  built-in  system  capability  for 
purposes  of  reorganization  in  order  to  either  overcome  system  failures  or 
for  the  purpose  of  satisfying  a  changing  computational  environment.  The 
extent  to  which  this  is  practically  feasible  through  the  use  of  programmable 
cellular  arrays  needs  to  be  investigated  since  the  implications  of  these 
findings  are  potentially  great  from  the  standpoint  of  system  maintainability, 
system  reliability,  and  system  availability.  Furthermore,  the  possiblity 
of  putting  the  same  hardware  organization  to  multiple  uses  and  the  potential 
of  having  a  system  capable  of  degrading  gracefully  in  the  event  of  failure 
have  a  great  deal  of  practical  appeal  from  a  designer's  as  well  as  the  user's 
point  of  view. 

The  above  three  major  questions  deal  with  the  problems  which  are  of 
great  practical  significance  to  the  designers  and  users  of  digital  systems 
and  should  be  the  next  topics  of  serious  study. 
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This  appendix  describes  the  salient  points  of  the  encoded  version  of 
the  algorithm  presented  earlier  in  the  report  and  it  is  used  to  carry  out 
automatically  the  mapping  of  an  arbitrary  synchronous  sequential  machine 
into  a  cellular  structure  using  the  basic  cell  given  in  Figure  2.1. 

The  input  format: 

The  first  card  is  a  description  of  the  problem.  It  can  be  up  to  80 
characters  long  and  can  not  be  omitted. 

Next,  the  machine  parameters  must  be  specified.  Each  parameter  is  in 
the  form  of  an  assignment  statement  that  specifies  both  the  value  and  the 
parameter  to  which  it  is  to  be  assigned.  Parameters  are  separated  by  a 
comma  and/or  one  or  more  blanks.  A  semicolon  must  end  the  group.  The  order 
of  the  parameters  is  unimportant. 

The  parameters  are: 

N  -  the  number  of  states  N  >  1 

U  -  the  number  of  input  symbols  U  >  1 

W  -  the  number  of  Mealy  outputs  W  >  0  m  +  v  >  i 

V  -  the  number  of  Moore  outputs  V  >  0w. 

K  -  the  number  of  lines  to  a  module  (^]>N  K  ^  0 

M  -  the  number  of  state  variables  (^)-N  M  >  1 

VLENGTH  -  the  maximum  length  of  any  figure 

K,  M,  and  VLENGTH  are  optional. 

If  K  and/or  M  are  not  specified,  a  procedure  is  invoked  to  minimize  M 
and/or  K.  (M  is  minimized  first.) 

The  VLENGTH  default  should  be  sufficient  for  most  jobs.  If,  however, 
a  figure  is  printed  out  with  the  last  columns  missing,  truncation  has  occurr¬ 
ed  and  VLENGTH  must  be  increased.  The  default  is  250,  increment  by  1  for 
every  column  lost.  If  incrementing  VLENGTH  causes  the  IEN13011  OX  NOT  ENOUGH 
MAIN  STORAGE  AVAILABLE  .  .  .  message  to  occur,  increase  the  Region  parameter 
on  the  JOB  card. 

The  next  set  of  cards  specify  the  machine  state  table.  There  should  be 
N(U(1+W)+V)  inputs.  The  inputs  are  read  in  to  fill  a  "standard"  state  table. 
That  is,  the  present  state  numbers  are  from  1  to  N  (top  to  bottom),  and  the 
input  symbols  are  from  1  to  U  (left  to  right).  The  next  state  can  start 
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anywhere  on  the  cards,  followed  immediately  by  a  comma  and  immediately  by  the 
W  Mealy  lines,  if  W>0.  The  Mealy  outputs  must  be  in  the  same  order  and  con¬ 
tain  no  blanks  between  them.  Follow  this  by  one  or  more  blanks  and  the  next 
state,  etc.  This  continues  U  times.  The  V  Moore  lines  should  follow  the 
last  set  of  W  Moore  lines,  if  V>0,  by  exactly  one  space.  The  Moore  outputs 
must  be  in  the  same  order  and  contain  no  blanks  between  them.  This  procedure 
is  repeated  N  times. 

Last,  the  flip-flops  are  specified. 

The  possible  types  of  flip-flops  are: 

1  -  Delay 

2  -  Trigger 

3  -  SR 

4  -  JK 

The  specification  of  the  flip-flops  is  of  the  form: 

HMNY-]  [  ,  ]  TYPE -|  [[  ,  ]  HMNYg  [  ,  ]  TYPE2  .  .  .]  where: 

HMNY  -  the  number  of  flip-flops  of  type  TYPE  HMNY>1 
(the  iteration  factor) 

TYPE  -  the  type  of  flip-flop  ?<TYPE<4 

The  total  number  of  fl  ip- *7ops  specified,  therefore,  is^HMNY's.  The 
first  HMNY.J  excitation  functions  are  for  flip-flops  of  type  TYPE-j ,  the  next 
HMNY 2  excitation  functions  are  for  flip-flops  of  type  TYPE,,,  and  so  forth.  If 
the  total  number  of  flip-flops  is  greater  than  M,  the  excessive  flip-flops 
are  ignored.  If  the  total  number  of  flip-flops  is  less  than  M,  the  flip-flop 
specification  list  is  reused.  Suppose  two  delay  flip-flops  and  one  JK  flip- 
flop  are  specified.  If  M=2,  the  machine  will  be  realized  entirely  with  delays. 

If  M=4,  the  machine  will  be  realized  using  three  delays  and  one  JK,  the  third 
excitation  function  will  be  for  a  JK  flip-flop.  (To  use  all  of  one  type  flip- 
flop,  one  could  just  specify  HMMY^  =  1  TYPE-j  =  type.) 

Limi tations : 

All  parameters  must  be  less  than  or  equal  to  32767,  no  matrix  may  be  greater 
than  32767  characters  in  width,  and  there  must  be  enough  memory  ir  the  com¬ 
puter. 
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1.0  INTRODUCTION 

This  paper  is  concerned  with  the  analysis  and  design  of  on-line  Built-In- 
Test  (BIT).  Such  systems  are  characterized  by  on-line  fault  monitoring,  and 
therefore,  a  study  of  the  effectiveness  of  on-line  fault  monitors  is  important 
[1,2].  Existing  models  of  systems  analysis  [3,4]  are  inadequate  for  modeling 
systems  with  on-line  fault  monitoring  since  they  assume  that  fault  detection 
occurs  in  zero  time  and  that  the  fault  monitor  never  fails.  Our  models  will 
allow  a  finite  detection  latency,  an  imperfect  fault  monitor,  multiple  fault 
monitors,  and  multiple  classes  of  faults. 

The  analysis  problem  occurs  when  the  system  structure  is  specified  and  we 
are  interested  in  evaluating  the  performance  of  the  system.  Such  an  analysis 
will  be  probabilistic  in  nature  since  the  failure  modes  of  various  components 
of  the  system  are  probabilistic.  If  a  repair  facility  is  included  in  our  model 
( i .  e . ,  the  system  is  reparable  or  maintained),  then  the  performance  measure  of 
interest  is  the  steady  state  system  availability.  If  the  system  is  non-main- 
tained  or  has  imperfect  coverage  [5,6],  the  performance  measure  of  interest  is 
the  system  reliability  as  a  function  of  the  mission  time. 

Due  to  finite  detection  latency,  it  is  possible  that  a  fault  has  occurred 
in  the  system  but  it  is  not  yet  detected  [7],  Such  a  state  of  the  system  is 
clearly  undesirable,  since  erroneous  outputs  produced  during  this  state  may 
propagate  and  contaminate  system  data  bases  so  as  to  make  recovery  extremely 
difficult,  if  not  impossible  [8].  The  purpose  of  an  on-line  fault  monitor 
(detector)  is  to  reduce  the  probability  that  the  system  is  in  the  undesirable 
state.  We  will  give  explicit  expressions  for  the  effectiveness  of  a  fault-moni 
tor  in  achieving  this  goal. 

It  is  also  possible  to  improve  the  reliability  of  faul t- tolerant  schemes 
such  as  TMR,  NMR,  or  hybrid-NMR  [4]  by  employing  an  on-line  detector  with  each 
module.  Such  systems  have  been  called  DR  (detector  redundant)  by  Ramamoorthy 
and  Han  [9],  SCR  (self-checking  redundant)  by  Karavay  and  Sogomonyan  [1U],  and 
self-purging  redundant  by  Losq  [11].  The  use  of  on-line  fault  detectors  over¬ 
comes  the  inherent  complexity  of  the  switches  employed  in  the  faul t-tolerant 
schemes  above  and  also  provides  fault  masking  capability  for  multiple  fault 
occurrence.  For  the  analysis  of  the  above  schemes,  the  reader  is  referred  to 
[9,10,11]. 
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The  problem  of  system  design  is  to  configure  the  optimal  system  for  the 
stated  purpose.  In  our  context,  we  are  interested  in  choosing  a  fault  monitor 
that  yields  a  system  with  optimum  cost  performance.  The  trade-off  is  between 
the  cost  of  the  monitor  and  the  cost  associated  with  the  time  the  system  spends 
in  the  undesirable  state.  In  several  simple  cases,  we  will  give  closed  form 
solutions  that  characterize  the  optimal  fault  monitor. 

The  basic  constituent  of  the  system  that  we  consider  is  called  a  module  and 
is  shown  in  Figure  2.1.  Two  types  of  modules  will  be  considered.  One  type  is  the 
non-maintained  {or  non-reparable)  module  M  and  the  other  type  is  the  maintained 
(or  reparable)  module  M'.  Module  M  consists  of  the  functional  unit  U  and  its 
on-line  fault  detector  D.  The  module  M‘  consists  of  the  functional  unit  U,  the 
detector  D  and  a  repair  facility  R.  An  example  of  a  functional  unit  is  an 
arithmetic  unit,  and  the  corresponding  detector  could  be  its  modulo-3  checker. 

If  the  functional  unit  is  a  complex  processing  unit,  then  the  detector  could  be 
a  software  routine  executed  on  a  microprocessor. 

2.0  ANALYSIS 

2 . 1  Analysis  of  a  Maintained  Module 

We  will  first  present  the  well-known  analysis  of  a  simple  maintained 
module,  devoid  of  the  on-line  detector  D.  Throughout  the  subsequent  discussion 
we  will  assume  that  the  time  between  two  successive  failures  of  the  functional 
unit  l)  is  exponentially  distributed  with  mean  1/,'.  Thus,  the  failure  rate  is 
and  the  Mean-Time-Between-Fai 1 ures  (MTBF)  is  1/ \.  We  assume  that  the  time  to 
repair  is  exponentially  distributed  with  mean  1/u.  Thus,  the  repair  rate  is 

and  the  Mean-Time-To-Repair  (mttr)  is  l/-j. 

The  module  has  two  possible  states,  F  (failed)  and  W  (working  properly). 

The  state  diagram  of  the  module  is  shown  in  Figure  22.  Let  Pp  be  the  steady 
state  probability  that  the  system  is  in  state  W.  It  can  be  shown  that  [3] 


and 
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Mow,  the  module  availability  A  is  simply  Py  by  definition.  Thus 

»  _  u  _  Ul  -  ’!TBF  (3) 

X  +  u  ”  l/X  +  1/u  MTBF  +  MTTR 

There  are  many  drawbacks  of  this  simple  well-known  model  of  availability. 
First,  it  assumes  that  the  detector  is  perfect;  i.e.,  the  detector  never  fails 
Second,  it  assumes  that  the  time  to  detect  failures  is  negligible  or  the 
detection  latency  is  zero.  We  present  a  model  below  that  removes  both  these 
drawbacks. 

We  make  all  the  assumptions  made  earlier  for  the  simple  two-state  model. 
In  addition,  we  assume  that  the  time  to  detect  failures  is  exponentially, 
distributed  with  mean  1/5.  Thus,  the  detection  rate  is  5  and  the  Mean 
Time-To-Oetect-Fai lures  ( MTDF )  is  1/5.  The  time  to  failure  and  the  time  to 
repair  for  the  detector  are  exponentially  distributed  with  mean  1/a  and  1/ 3, 
respectively  where  a  may  also  be  interpreted  as  the  false  alarm  rate.  The 
module  can  be  in  any  one  of  the  four  states:  W,  F,  D  and  C.  In  state  W,  the 
module  is  functioning  properly;  in  state  F,  the  functional  unit  has  failed  but 
the  failure  is  not  yet  detected.  In  state  D,  the  failure  is  detected  and  the 
functional  unit  is  under  repair.  In  state  C,  the  detector  has  failed  and  it  i 
under  repair.  The  state  diagram  is  given  in  Figure2.3.  The  steady  state 
probabilities  for  each  of  these  states  can  be  obtained  as 


p  =  _ i _ 

W  l  +  X/u  +  X/5+i/£’ 

p  =  _ X/ 5 _ 

F  1  +  X/u  +  X/6  +  n/i?.  ’ 

p  =  _ tin _  _  = 

D  1  +  X/u  +  \/ 5  +  */3  3 

p  s  _  3/ 3 _ 

C  1+X/u+X/i+n/S' 
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It  is  interesting  to  observe  that  when  the  module  is  in  state  F,  it  has 
malfunctioned  but  the  outside  world  does  not  know  it.  Thus,  from  an  external 
point  of  view  the  module  is  said  to  be  available  when  it  is  either  in  state  W  or 
in  state  F.  In  reality,  the  module  should  be  called  available  only  when  it  is 
in  state  W.  Thus,  we  have  the  real  availability  Ar  =  Pw  and  the  apparent 
availability  Aa  =  Pw  +  Pp.  The  purpose  of  the  on-line  detector  is  to  keep 
A.  and  A„  as  close  to  each  other  as  possible. 

a  r 


_ 1 _ 

1  +  x(i-  +  j)  +  V? 

_ _ 1 _ 

,  ,  MTTR  +  MTDF  ,  a 
1  MTBF  B 

Now,  since  3  is  usually  much  smaller  than  we  may  let 

A  =  _ ytBf  (4) 

r  MTBF  +  (MTTR  +  MTDF) 


Note  that  the  real  availability 

1 


A  = 
r 


1  +i+f+f 

U  6  8 


Comparing  expression  (4)  with  expression  (3),  we  conclude  that  MTTR  +  MTDF 
behave  like  an  "effective"  repair  time.  The  use  of  a  more  powerful  detector, 
i.e.,  a  smaller  value  of  MTDF,  implies  a  reduction  in  the  effective  repair  time, 
which  in  turn  implies  an  increase  in  real  availability.  In  fact,  for  fixed 
values  of  MTBF  and  MTTR,  largest  real  availability  results  when  we  employ  a 
detector  with  zero  detection  latency. 


Next,  consider  the  probability  of  being  in  the  undesirable  state  F 


P-  = 


V/i 


F  1  +  X/u  +  X/6  +  Tt/6 

=  X/6  (1  -  X/u  -  X/6  -  ct/B) 
-  7  (1  ‘  */u  -  1)  - 


(5) 


-id-  '/••*  -  j) 
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thus  employing  a  more  powerful  detector  (i.e.,  increasing  the  value  of  5), 
reducing  Pp,  and  hence,  bringing  the  real  availability  Ar  and  the  apparent 
availability  Aa  closer  together.  In  fact,  a  detector  with  an  infinite 
detection  rate  (or  zero  detection  latency)  implies  that  Pr  =  0  and  A,  = 

r  a 

Ar-  In  this  case,  there  is  no  need  to  distinguish  between  the  concepts  of 
real  and  apparent  availabilities. 

Finally,  consider  the  apparent  availability 


A  =  P  +  P 
Ma  KW  F 


1  +  \/6 


1  +  -  +  j  +  | 

u  6  6 


A/u  *  a/8 


1  +  A/u  +  A/5  +  oc/S 


(6) 


=  1 


(-  +  j)  A 
u  6'  r 


Now,  since  Ap  increases  with  an  increase  in  5  (i.e.,  a  more  powerful 
detector),  we  conclude  that  the  apparent  availability  reduces  with  an  increase 
in  6.  Thus,  Aa  and  Ar  approach  each  other  as  6  increases  and  Aa  =  Ap  in 
the  limit  <5-*~  .  Further  analysis  suggests  that  the  rate  of  decrease  in  Aa  is 
very  slow  since 


A 


a 


1  -  (~  +  f)  (1  -  A/y  -  \/i  -  a/6) 
u  a 


1 


8 


(7) 


Thus,  as  a  first  order  approximation,  the  apparent  availability  remains 
constant,  independent  of  the  mean  detection  latency. 

To  fix  our  ideas,  let  A  =  10  "5/hr,  u  =  2/hr,  a  2  10  Tj/hr,  and  =  =  4/hr. 
In  Figure  2.4  we  have  plotted  the  apparent  availability  A  and  the  real 
availability  Af  as  functions  of  MTDF. 
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In  general,  different  types  of  faults  will  require  different  amounts  of  time 
for  detection  and  repair.  We  assume  there  are  k  fault  classes  each  with  a 
failure  rate  Aj,  detection  rate  5- •,  and  repair  rate  u  -j.  Figure  2.5  is  a  state 
diagram  for  the  Markov  chain  of  the  system. 


Figure  2. 5 


The  steady  state  probabilities  for  being  in  each  of  state,  X,  can  be  given 
as. 


The  real  availabilities 


Note  that  each  failure  class  gives  a  contribution  to  a  reduction  in  A  .  Thus, 
in  effect,  these  classes  are  in  "series". 


2.3  Multiple  Detectors 

It  is  clear  that  we  can  improve  the  detectability  of  a  module  by  employing 
several  detectors  in  parallel.  Assume  there  is  a  single  fault  class  with 
failure  rate  X.  There  are  k  detectors  with  detection  rate  5.  and  the  associated 
repair  rate  is  u-j.  The  state  diagram  is  shown  in  Figure  2.6. 

**1 


If  we  assume  that  for  all  i,  then 


_ _ 1 _ 

i  4.  MTTR  »  MTDF  parallel  ^  k  "TTRni 


In  other  words,  the  detection  rate  of  the  detectors  have  an  additive  effect  and 
the  result  is  an  increased  real  availability.  But  increased  number  of  detectors 
also  imply  an  increased  false  alarm  rate  which  tends  to  decrease  the  real 
avail abil ity. 

Assuming  X  =  10  '5/hr.,  y  =  2/hr.,  and  a  =  0,  the  following  table  2.1  gives  the 
real  availability  for  various  combinations  of  Modulo-m  detectors  for  the  ALU 
shown  in  Figure  2.7. 


Table  2.1  Various  Combinations  of  Modulo-m  Detectors 


One  Detector 


Two  Detectors 


L  3*5 


.66  *  .80 


5  *  7 


.80  +.86 


Real 

Aval labi 1  i  ty : 
Unavai labi 1 ity 


■99998315  .99998765  |. $9998792  .99998848 


Three 
De  tectors 

!  3  +  5  +  7 


.66+.80+.86 
.99998994  1 


■204*10-41o.1775-1Q-4  0-1685*10-4  0-1235+1CT4  0- 1208*1Q-4I 0- 1152*1Q-4  0-1006+10-4 


The  data  on  the  detection  rate  <5  for  various  values  of  m  was  obtained  from  [12]. 
It  is  clear  that  real  availability  increases  with  an  improved  detector  and  it 
also  increases  by  employing  multiple  detectors. 

2.4  Analysis  of  a  Non-Mai ntai ned  Module 


We  will  now  consider  the  analysis  of  a  non-mai ntai ned  module  M  consisting 
of  the  functional  unit  U  and  the  associated  detector  (or  fault  monitor)  D.  Let 
U  and  C  denote  the  time  to  failure  of  the  unit  and  the  detector,  respectively. 
Let  D  be  the  time  to  detect  a  fault  in  the  module.  Let  T  denote  the  time  to 
fault  indication.  Note  that  U,  C,  D  and  T  are  all  random  variables  and  T  =  min 
(U  +  D,  C).  Let  R  (t)  and  Rr ( t)  denote  the  apparent  and  the  real 
reliabilities  of  the  module,  in  the  order  given.  We  will  assume  that  U,  D  and  C 
are  mutually  independent,  exponentially  distributed  random  variables  with  means 
1/a,  1/3  and  1/ct,  respectively.  Then 


R  (t)  =  P(T  - 1 )  =  P(U  +  D  "  t ,  f  t ) 

d 

=  P(U  +  D  -  t)  P(C  -t) 

-  Wt!  VtJ 
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Figure  2.7  Design  of  a  Non-Mai ntai ned  Module 


By  exponential  assumption, 


R£(t)  =  e'at,  RQ(t)  =  e'6t,  and  R^t)  =  e'xt. 


Therefore, 


RU+D^ 


(9) 


Then,  from  the  above,  we  get 

R  (t)  =  no) 

a  s  -  \  t>  -  x 


For  computing  real  reliability  Rr(t),  we  note  that  the  module  ceases  to 
function  properly  when  a  fault  occurs  in  either  the  unit  or  the  detector. 

ThUS’  Rr(t)  =  P(U>t,  C>t) 

=  P (U > t )  P(c>t)  by  independence 
=  R  (t)  R  (t) 

-(x+*)t  (ID 

=  e 

We  note  that,  in  the  absence  of  the  detector,  the  real  reliability  is  e‘At 
therefore,  employing  a  detector  actually  reduces  the  real  reliability. 

Without  a  detector,  a  -  0,  sis  near  zero,  and  the  apparent  reliability 
is  very  high.  Thus,  the  apparent  reliability  is  also  reduced  by  employing  a 
detector.  The  purpose  of  an  on-line  detector  is  to  close  the  gap  between  the 
values  of  the  real  and  the  apparent  reliabilities. 
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We  can  also  compute  the  real  and  apparent  MTTF  (MTTF^  and  MTTFa): 


Mm  =  Hr- 

r  A  +  a 


(12) 


and  (5-X)  "(X+aJ  ( -5 - X )  (5+ a) 

-  .  5  +  X  +  a 

'  Tx+^1  Ti+«T  (13) 

We  define  the  detector  effectiveness  to  be  the  ratio  MTTFr/MTTFa.  The 
detector  effectiveness  is  plotted  in  Figure  3.1  as  a  function  of  the  detection 
rate  6. 

3.0  OESIGN 

We  now  present  a  design  model  for  a  non-maintained  module.  We  are  asked  to 
choose  the  characteristics  of  an  on-line  detector  that  will  minimize  the  total 
cost.  The  two  cost  components  that  enter  into  our  model  are  the  cost  of  the 
detector  and  the  cost  (or  penalty)  for  the  time  system  spent  in  the  undesirable 
state.  For  the  sake  of  simplicity,  we  will  assume  that  the  detector  has  zero 
failure  rate,  i.e.,  a  =  0. 

The  percentage  of  time  spent  by  the  module  in  the  undesirable  state  is 
easily  computed  to  be  x/o.  Let  the  per  unit  time  penalty  of  being  in  this  state 
be  given  by  Kp.  Then,  the  penalty  is  given  by  Kp  >./ 6  .  To  characterize  the 
cost  of  the  detector,  we  assume  that  the  unit  U  is  an  arithmetic  unit  and  the 
detector  D  is  a  modulo-m  checker  (see  Figure  3.1).  The  problem,  then,  is  to 
determine  the  optimum  value  of  m. 

The  cost  of  a  modulo-m  checker  may  be  approximated  by  CQ  log  m.  Then  the 
total  cost 

C  =  KpX/6  +  CQ  log  m  Q4) 

Note  that  X,  Kp  and  CQ  are  assumed  to  be  fixed  parameters,  but  5  is  expected 
to  be  a  function  of  m. 


170  ISSO  2140  2520 

NUMBER  OF  FAULTS  DETECTED  PER  HCUR 


Figure  3.1  Detector  Effectiveness 


A  reasonable  functional  relationship  is 

5  =  50  nia  (1.5) 

After  substituting  (15)  into  (14),  we  can  determine  the  optimum  value  of  m  by 

taking  dC  and  setting  it  equal  to  zero 
cfn 


This  shows  that  the  larger  the  value  of  Kp  relative  to  Co,  the  larger 
should  be  the  value  of  m.  In  other  words,  if  the  penalty  of  being  in  the 
undesirable  state  is  large,  we  should  choose  a  more  powerful  detector. 

It  is  hard  to  parameterize  such  a  model.  We  obtained  data  from  a  paper  by 
J.  Clary  [12]  and  fitted  the  data  to  obtain  the  values  of  50  and  a.  Using  these 
values  and  x  =  10  "5/hr,  we  can  determine  the  optimal  value  of  m  as  a  function 
of  the  relative  cost  Kp/CQ  from  equation  (16).  This  function  is  plotted  in 
Figure  3.2. 

4.0  WORK  PLANNED  FOR  THE  FUTURE 

We  believe  that  models  developed  during  the  last  two  years  are  capable  of 
evaluating  the  effectiveness  of  conventional  concurrent  on-line  BIT.  The 
projected  work  can  be  divided  into  three  disjoint  categories. 

First,  although  some  examples  of  the  use  of  the  models  are  given,  more 
extensive  examples  are  desired.  Some  extensions  of  the  models  developed  so  far 
are  also  possible,  e.g.,  design  models  for  maintained  modules. 

The  second  category  of  our  effort  will  be  to  adapt  our  models  to  statis¬ 
tical  monitoring  approach  studied  by  J.  Gault  [13].  This  effort  will  revolve 
around  computation  of  the  probability  of  false  alarm  and  the  probability  of 
escape.  We  are  interested  in  compacting  the  two  measures  into  a  single  measure 
such  as  reliability  or  availability.  The  basic  difference  between  the  models 
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(M  -OPTIMUM) 


developed  by  this  researcher  and  models  needed  for  sample  fault  monitoring  is 
that  the  former  models  give  rise  to  a  continuous  parameter  Markov  chain;  whereas, 
the  latter  will  give  rise  to  a  discrete  parameter  Markov  chain.  The  task  then 
will  be  to  transform  the  former  models  to  a  discrete  rather  than  a  continuous 
time  environment. 

The  third  category  of  our  effort  will  involve  characterizing  the  fault¬ 
detecting  and  fault-correcting  capability  of  the  programmable  cellular  structure 
developed  by  P.  N.  Marinos  [14].  Given  a  fixed  cellular  structure,  we  are 
interested  in  developing  models  that  provide  a  measure  of  effectiveness  of  the 
structure  and  its  self-checkability.  Similarly,  we  are  interested  in 
characterizing  the  trade-offs  involved  in  allocating  a  fraction  of  the  given 
modules  to  the  checking  function. 

The  last  two  parts  of  our  proposed  research  will  therefore  attempt  to 
coordinate  the  efforts  of  the  three  different  researchers  working  on  the 
project. 
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ABSTRACT 

Presented  is  the  design  of  a  flexible  expandable  mul tiprocessor  system 
for  video  graphics  and  image  processing.  The  design  involves  a  central 
controller  which  broadcasts  data  to  a  variable  number  of  independently 
executing  processing  units,  each  of  which  in  turn  controls  a  variable 
number  of  memory  units  among  which  the  video  (frame  buffer)  image  is 
distributed.  A  simple  linear  interconnection  of  processing  and  memory 
units  allows  straightforward  sanity  check  detection  of  faulty  modules  and 
a  graceful  degradation  of  performance  and/or  image  resolution  whenever 
faulty  processing  or  memory  guarantees  both  an  even  work  load  distribution, 
as  well  as  maintenance  of  image  coherence  for  each  processing  element. 
Execution,  speed  and  image  resolution  can  be  independently  altered  (at  any 
time)  by  varying  the  number  of  processing  and  memory  units.  Sample 
applications  of  the  system,  for  rapid  line  drawing  and  "electronic  scene 
generation"  (visible  surface  algorithms),  are  described.  Variations  of  the 
design  for  low-cost  and  for  powerful,  real-time  configurations  are 
outl ined. 
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1.0  INTRODUCTION* 

A  long-standing  goal  of  researchers  in  computer  graphics  systems  has 
been  the  development  of  real-time  three-dimensional  modeling  systems. 

These  systems,  which  produce  a  realistic  image  of  a  simulated  three-dimen¬ 
sional  environment,  have  a  wide  variety  of  potential  uses  from  simulators 
for  pilot  training  to  interactive  design  of  houses  and  automobiles.  The 
most  sophisticated  of  these  systems  produce,  in  real-time,  images  on  color 
video  displays  (TV's)  of  startling  reality.  The  only  limitation  to  wide¬ 
spread  use  of  these  systems  has  been  their  prohibitive  costs  ($500,000  and 
up).  Thus,  virtually  the  only  uses  today  are  those  for  which  there  is  no 
real  alternative,  e.g. ,  simulating  maneuvers  in  gravity-free  space  or 
training  simulators  for  pilots  of  large  (and  expensive)  airplanes.  If  such 
modeling  systems  could  be  provided  at  significantly  lower  costs,  it  is  safe 
to  presume  that  their  use  would  become  dramatically  more  widespread. 

A  short  examination  of  the  computational  expense  of  the  problem  suf¬ 
fices  to  justify  the  complexity  and  expense  of  current  systems  which  solve 
it.  A  video  image  to  a  digital  system  normally  consists  of  a  matrix  of 
picture  elements  ("pixels")  of  between  480  and  512  rows  (scan  lines)  with 
from  512  to  640  pixels  in  each  scan  line.  (Until  recently  this  size  was 
limited  by  the  resolution  of  video  monitors.  Within  the  past  two  years, 
monitors  with  900  to  1000  scan  line  capacity  have  become  available;  the 
factor  of  four  increase  in  number  of  pixels  per  image  only  exacerbates  the 
computational  problem.)  The  image  is  then  simply  a  set  of  some  300,000 
pixels,  each  of  which  (for  a  color  image)  contains  three  independent  com¬ 
ponents  -  red,  green,  blue  -  each  usually  to  8-bits  of  resolution.  The 


*This  work  was  partially  supported  by  NSF  Grant  MCS-77-03905,  and  by  Naval 
Electronics  Systems  Command  Contract  N00039-78-C-0431 ,  (through  Research 
Triangle  Institute  Grant  43U1667).  Much  of  this  work  was  performed  in 
collaboration  with  Brian  W.  Johnson  of  the  University  of  Texas  at  Dallas 
while  the  author  was  a  member  of  the  faculty  of  that  university. 
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entire  problem  at  hand  is  simply  calculating  these  900,000  values  each  time 
the  image  is  scanned  out  onto  the  video  screen,  usually  30  times  per 
second. 

The  proper  value  at  each  pixel  is  a  function  of  the  data  base  (the 
simulated  environment),  the  viewing  position  and  orientation  of  the  simu¬ 
lated  viewer,  and  the  location(s)  of  the  light  source(s)  in  the  simulated 
environment.  The  environment  is  most  often  described  as  a  set  of  objects 
in  the  environment  (Euclidian  three-space)  coordinate  system.  Each  object 
is  usually  described  by  a  set  of  planar  tiles  ("polygons")  which  form  its 
various  surfaces,  (Figure  1.1,  from  Sutherland,  Sproull ,  and  Schumacker 
(1974),  shows  the  boundaries  of  a  set  of  polygons  defining  the  surface  of  a 
3-D  object) . 

Other  methods  of  object  description  are  sometimes  used,  e.g.,  as 
collections  of  geometric  solids  (MAGI  (1968)  or  curved  surfaces,  Catmull 
(1975),  Blinn  and  Newell  1976)).  Since  the  particular  object  definition 
method  does  not  significantly  affect  the  system  archi tecture,  we  shall 
assume  hereon  that  the  common  planar  polygon  descriptions  are  used.  In 
order  to  compute  the  red,  green,  and  blue  values  for  a  particular  pixel, 
the  system  has  to  determine: 

a)  which,  if  any,  polygons  map  onto  this  pixel's  area, 

b)  which  one  from  this  set  is  closest  to  the  viewer  (and  thus,  is  the 
one  visible  obscuring  all  the  other  polygons,  and 

c)  the  details  about  the  precise  part  of  this  closest  polygon  which 
maps  onto  the  pixel,  its  assigned  color,  its  angle  and  distance 
from  the  light  source(s),  and  its  angle  and  distance  to  the 
viewer. 

When  programmed  on  a  conventional  general  purpose  computer,  computing 
such  a  simulated  image  may  well  take  several  minutes,  and  easily  longer;  so 
developing  a  system  to  do  it  in  1/30  second  is  a  non-trivial  task.  (The 
appendix  gives  a  short  synopsis  of  the  various  algorithms  and  approaches 
considered  which  lead  to  the  development  of  the  design  presented  in  this 
paper. ) 
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Figure  1.1  Set  of  Planar  Tiles  ("Polygons") 
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To  understand  our  solution,  let  us  first  examine  the  overall  sequence 
of  steps  which  need  to  be  performed  in  order  to  produce  a  visible  surface 
image  on  a  video  display. 

a)  The  original  polygons  (in  object  coordinate  space)  are  transformed 
into  the  position  as  seen  from  the  simulated  viewing  position. 
(This  is  a  sequence  of  rotations  and  translations.) 

b)  The  parts  of  the  environment  data  base  which  are  not  in  the  field 
of  view  are  discarded  from  further  consideration  by  clipping  all 
polygons  against  the  boundaries  of  the  field  of  view. 

c)  Perspective  transformation  is  applied  to  foreshorten  the 
appropriate  environmental  parts  as  a  function  of  distance. 

It  is  at  this  point  that  a  visible  surface  algorithm  is  invoked. 

Since  steps  a),  b),  and  c)  can  be  achieved  in  real-time  by  current 
affordable  1 i ne-drawi ng  systems  (e.g.,  Evans  and  Sutherland  (1976),  Vector 
General  (1978)),  we  will  concentrate  our  attention  on  the  actual  visible 
surface  computations.  (Of  course,  these  line-drawing  systems  are 
affordable  precisely  because  they  do  not  have  to  perform  the  laborious 
visibility  computations  for  some  300,000  pixels!)  Most  current  real-time 
video  systems  (Evans  and  Sutherland  (1977),  Shohat  and  Florence  (1977))  use 
a  pipeline  architecture  to  achieve  the  necessary  high  throughput  rates. 

(See  Figure  1.2  from  Shohat  and  Florence  (1977)).  Each  module  in  the 
pipeline  is  typically  a  highly  specialized  processing  unit.  Thus,  these 
designs  do  not  easily  lend  themselves  to  substantial  upgrading  (to  achieve 
higher  capacity)  or  downgrading  (to  achieve  lower  cost). 

Our  own  design  capitalizes  on  the  newly  plentiful  resource  of  inexpen¬ 
sive  LSI  circuitry.  Thus,  each  allowing  a  significant  but  bounded  increase 
in  both  memory  and  processing  requirements  in  return  for  archi tectural 
flexibility.  Specifically,  our  solution  is  tailored  -  although  not  re¬ 
stricted  -  to  what  may  be  the  simplest  visible  surface  algorithm,  the 
so-called  "Z  buffer"  algorithm,  one  so  simple  that  it  seems  never  to  have 
appeared  in  print  in  its  own  right.  Sutherland,  Sproull,  and  Schumacker 
(1974)  mention  it  in  passing  (p.  51),  saying  "that  if  a  large  memory  is 
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Figure  1.2  Pipeline  Architecture 
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available  ...  This  method  results  in  a  computing  cost  which  depends  only 
on  the  depth  number  (Dc)  and  not  otherwise  on  the  environment  complexity". 
(Dc  is  the  number  of  front-facing  polygons  ‘pierced,  on  the  average,  by  an 
arbitrary  ray  from  the  viewpoint".)  Catmull  (1975)  used  the  method  as  part 
of  a  more  sophisticated  algorithm  for  visible  display  of  curved  surfaces. 
The  basic  algorithm  utilizes  two  large  buffers  each  containing  an  entry  for 
each  pixel  on  the  screen,  an  "image"  buffer  which  contains  the  (RGB)  inten¬ 
sities  at  each  pixel,  and  a  "Z  buffer"  which  contains  at  each  pixel  the 
distance  of  the  closest  object  encountered  there  so  far  (Figure  1.3).  The 
polygons  are  processed  sequentially,  in  any  order.  Each  polygon's  proces¬ 
sing  starts  with  determining  the  pixels  upon  which  the  polygon  “falls"  in 
the  image.  For  each  such  pixel  the  distance  of  the  polygon  from  the  simu¬ 
lated  viewer  is  computed.  (This  is  the  "Z“  value.)  This  value  is  compared 
with  the  entry  in  the  "Z  buffer"  for  this  pixel.  If  this  new  value  is 
smaller  than  the  current  entry,  then  this  new  polygon  is  closer  to  the 
viewer  at  this  pixel  than  the  closest  previously  encountered  polygon  and  so 
this  new  polygon  would  not  be  visible  at  this  pixel.  Thus,  in  this  case 
the  new  "Z"  value  is  put  into  the  "Z  buffer"  and  this  new  polygon's  (RGB) 
intensity  value  is  computed  and  inserted  into  the  image  buffer.  If,  on  the 
other  hand,  the  new  "Z"  value  is  greater  than  the  value  currently  in  the  "Z 
buffer"  at  this  pixel,  then  this  polygon  is  farther  than  the  closest  poly¬ 
gon,  and  processing  is  terminated  for  this  pixel  for  this  polygon  without 
any  changes  to  the  buffers.  Processing  continues  with  the  next  pixel  into 
which  the  current  polygon  "falls". 

This  simple  algorithm  is  seldom  used,  principally  for  two  reasons:  1) 
few  current  systems  have  sufficient  memory  for  two  such  large  buffers,  and 
2)  every  pixel  of  every  polygon  needs  to  be  computed.  To  understand  the 
potential  severity  of  this  second  reason,  let  us  recall  that  traditionally 
designers  of  the  visible  surface  algorithms  (e.g.,  Watkins  (1970))  have 
attempted  to  gain  efficiency  by  avoiding,  whenever  possible,  consideration 
of  all  but  the  (single)  nearest  polygons  potentially  visible  on  a  particu¬ 
lar  scan  line.  These  can  be  considered  together  as  a  set.  Determining  the 
"Z"  ordering  on  this  set  at  just  a  few  key  points  along  the  scan  line  is 
sufficient  to  determine  the  sequence  of  visible  polygon  segments  along  the 
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entire  line  (Figure  1.4).  At  intermediate  points  all  the  obstructed  poly¬ 
gons  are  simply  ignored.  A  "Z  buffer"  algorithm,  since  it  handles  each 
polygon  separately,  computes  every  affected  pixel  for  each  polygon,  a 
procedure  which  certainly  seems  to  be  wasteful  and  inefficient.  However,  a 
closer  examination  of  the  situation  reveals  that  for  mul ti processor  systems 
the  procedure  may  in  fact  be  very  attractive.  Sutherland,  Sproull,  and 
Schumacker  (1974)  estimate  that  the  average  number  of  polygons  "falling  on" 
a  pixel  is  only  3;  that  is,  many  images  contain  large  areas  of  sky,  water, 
ceiling,  floors  -  areas  in  which  there  are  not  too  many  polygons  stacked 
one  behind  the  other.  This  implies  that  the  (i n)efficiency  of  the  "Z 
buffer"  algorithm  is  constant;  at  worst  it  is  some  constant  multiple  (e.g., 
3)  of  the  most  efficient  possible  algorithm,  one  which  can  determine  with 
negligible  cost  the  visible  polygon  at  each  pixel.  Since  LSI  technology  is 
rapidly  diminishing  the  cost  of  simple  arithmetic  processing  units,  a 
factor  of  3  is  no  longer  burdensome. 

2.0  SYSTEM  DESCRIPTION 

The  fundamental  system  organization  is  as  illustrated  in  Figure  2.1. 
Figure  2.2  shows  in  somewhat  greater  detail  the  organization  of  the  image 
buffer,  which  is  accessed  by  both  the  processor  and  the  video  scan  gener¬ 
ator.  Figure  2.3  illustrates  the  simple  time  division  multiplexing  between 
the  processor  and  the  video  scan  generator.  We  note  here  that  the  current 
pixel's  data  remains  on  the  video  scan  generator  bus  even  during  the  period 
which  is  assigned  to  the  processor. 

If  we  consider  using  only  commonly  available  inexpensive  LSI  RAM's, 
then  the  requirement  of  the  scan  generator  (needing  to  cycle  through  the 
entire  image  in  approximately  30  milliseconds)  will  limit  the  usefulness  of 
this  simple  design  to  very  coarse  images.  To  increase  the  bandwidth  we 
simply  insert  additional  memory  units  onto  the  system  bus.  Figure  2.4 
illustrates  the  organization  of  this  enhancement  and  Figure  2.5  shows  the 
timing  cycles.  It  is  important  to  note  that  the  actual  bus  to  the  scan 
generator  does  not  increase  in  size  or  speed.  All  memory  units  are  read  in 
parallel  during  the  scan  generator  access  times.  During  the  following 
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complete  timing  cycle,  the  various  results  are  put  onto  the  video  bus  by 
enabling,  in  sequence,  the  bus  drivers  of  the  various  memory  units.  This 
enabling  is  directly  controlled  by  the  least  significant  bits  of  the  video 
scan  generator's  X  address.  In  this  fashion  the  number  of  memory  units 
need  not  be  known  to  the  scan  generator.  If  there  are  fewer  units,  some  of 
the  least  significant  address  bits  are  ignored  and  thus,  consecutive 
locations  on  the  video  screen  will  be  accessed  from  the  same  image  memory 
unit's  output  register.  The  result  will  be  a  coarser  image  (128  x  128,  say 
instead  of  512  x  512)  than  the  scan  generator  is  capable  of  producing.  (It 
will  be  seen  later  that  a  somewhat  different  resolution-independence  scheme 
for  the  processor  side  of  the  memories  will  free  the  entire  system,  both 
hardware  and  software,  from  reliance  on  a  fixed  resolution.)  The  proper  ID 
selection  in  each  memory  unit  (as  seen  in  Figure  2.3)  is  a  function  of  both 
the  unit's  ID  number  and  the  total  number  of  memory  units  currently  in  the 
system.  Although  such  selection  settings  are  normally  set  manually  through 
jumpers  or  DIP  switches,  we  prefer  for  them  to  be  set  automatically.  This 
is  done  through  the  following  mechanism.  In  addition  to  the  processor  bus 
and  video  scan  generator  bus,  the  system  includes  a  set  of  lines  for  ID 
numbers  and  the  "total -uni ts"  number. 

As  illustrated  in  Figure  2.6,  the  ID  lines  consist  of  a  set  of  lines 
sufficient  to  represent  the  largest  possible  number  of  memory  units  in  a 
system.  (For  example,  for  a  1024  maximum  memory  unit  system  this  number 
woul d  be  10. ) 

In  this  fashion  the  set  of  lines  are  started  at  0  on  one  side,  each 
board  has  an  increment  circuit  on  it,  thus  the  number  on  the  ba.ckplane  ID 
lines  is  incremented  by  one  each  time  it  passes  through  a  memory  unit  board 
(Figure  2.7).  A  similar  set  of  lines  is  used  to  return  the  ID  signal  value 
from  the  end  of  the  system.  (This  number  is  simply  the  total  number  of 
memory  units  in  the  system  at  the  present  time.)  With  this  technique 
boards  can  be  inserted  into  or  extracted  from  any  position  at  any  time 
without  the  necessity  of  any  hardware  (or  software!)  modification. 

We  also  note  at  this  point  that  neither  the  video  scan  generator  nor 
the  image  memories  rely  on  any  mechanism  for  altering  the  contents  of  the 
image  memories.  Thus,  we  can  distribute  responsibil ity  for  computing  the 
image  memories  contents  to  a  number  of  different  processors. 
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Figure  2.7  Unit  Interconnection  Diagram 


Figure  2.8  illustrates  a  modified  organization  which  achieves  this 
increased  capability.  Virtually  the  only  addition  has  been  the  introduc¬ 
tion  of  a  central  broadcast  controller  (CBC)  which  “announces"  the  descrip¬ 
tion  of  each  new  polygon  to  all  the  processing  elements  (PE's).  The  system 
is  designed  to  operate  as  follows: 

a)  Immediately  upon  power-on,  the  CBC  broadcasts  the  (possibly  new) 
software  to  all  the  processing  elements.  (All  PE's  execute  the 
same  program,  but  each  has  a  separate  copy  of  it  and  each  may  be 
executing  different  parts  of  it  at  any  instant.)  ' 

b)  The  CBC  instructs  the  PE's  to  survey  the  memory  units  under  their 
control.  This  consists  simply  of  each  PE  attempting  to  read  and 
write  a  single  word  into  each  possible  memory  unit  under  its 
control.  (Each  knows  (from  the  ID  lines),  1)  the  total  number  of 
units  in  the  system  at  this  time,  and  2)  the  first  memory  unit 
that  is  under  its  control;  it  simply  needs  to  find  the  upper  limit 
of  its  domain.) 

c)  The  "Z"  and  image  buffers  are  initialized  by  each  PE. 

d)  The  actual  processing  proceeds  now  with  the  CBC  broadcasting 
description  of  one  or  more  polygons  to  be  processed.  Since  each 
PE  knows  which  MU's  are  under  its  responsibility  and  how  many  MU's 
are  in  the  system,  it  can  easily  compute  the  location  of  each  of 
its  pixels  on  the  screen.  For  each  polygon  it  does  the 
appropriate  "Z  buffer"  algorithm  computations  (as  outlined  before) 
for  all  its  pixels  affected  by  this  current  polvgon.  When  done, 
each  PE  signals  to  the  CBC.  When  all  the  PE's  are  done,  the  CBC 
broadcasts  the  next  polygon  (or  set  of  polygons).  The  procedure 
continues  until  the  complete  set  of  polygons  in  the  scene  are 
exhausted. 

By  having  the  MU's  and  the  PE's  implemented  on  the  same  size  PC  cards 
and  utilizing  the  same  connectors,  all  the  PE  bus  lines  can  be  implemented 
on  a  single  set  of  backplane  lines.  A  PE  simply  ignores  any  such  signals 
coming  in  from  its  left,  and  generates  its  own  signals  on  the  lines  to  its 
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right.  { ME 1 s  simply  pass  these  signals  through.)  Thus,  a  PE  simply  con¬ 
trols  all  the  MU's  between  it  and  the  next  PE  on  its  right.  Configurations 
can  be  altered  by  simply  reshuffling  the  boards. 

Figure  2.9  illustrates  that  regular  interlacing  is  possible  for  both 
the  MU's  and  the  PE's.  This  is  particularly  important  for  efficient  pro¬ 
cessing,  for  two  reasons:  1)  it  guarantees  that  for  any  polygon  (of  size 
greater  than  a  single  pixel  and  for  systems  with  greater  than  two  proces¬ 
sors)  the  pixels  on  which  it  lies  will  be  located  in  the  domains  of  a 
number  of  different  PE's  so  that  the  work  load  will  always  be  distributed, 
and  2)  the  regular  pattern  or  affected  pixels  in  any  on  MU  allows  rapid 
incremental  computations  for  "Z",  and  eventually  for  RGB.  (Recall  that  all 
these  polygons  are  planar;  so  the  amount  of  change  per  each  pixel  step  will 
be  constant.)  Also,  the  same  regular  pattern  occurs  in  each  affected  MU; 
for  example,  if  adjacent  pixels  in  a  particular  MU  are  2  units  apart  in  X 
and  4  units  in  Y,  then  they  will  be  that  way  for  every  affected  memory 
unit.  This  allows  the  CBC  to  compute  the  appropriate  incremental  change 
values  during  the  time  the  PE's  are  processing  the  previous  polygon.  The 
CBC  can  then  broadcast  these  values  directly,  thereby  avoiding  a  computa¬ 
tion  step  in  each  PE. 

Figure  2.10  shows  how  a  particular  configuration  can  be  modified  to 
increase  or  decrease  image  resolution  or  processing  speed.  (The  variations 
in  processor  memory  assignments  from  those  of  Figure  2.9  reflect  the  compu¬ 
tations  performed  by,  the  memory  ID  select  modules  illustrated  in  Figure 
2.6.)  Figure  2.11  illustrates  the  physical  organization  corresponding  to 
the  various  resolution/speed  configurations  of  Figure  2.10. 

Let  us  consider  some  of  the  capabilities  of  this  kind  of  organization. 
It  allows  virtually  limitless  flexibility  in  tradeoff  between  power  and 
economy.  On  the  one  extreme  there  can  be  systems  with  only  one  PE  and  one 
MU.  Of  course,  such  a  system  would  exhibit  a  very  coarse  image,  but  it  may 
be  suitable  for  simple  video  games,  for  instance.  On  the  other  extreme  one 
can  configure  a  system  witn  high  resolution  and  very  high  throughput.  The 
number  of  pixels  per  PE  can  be  reduced  all  the  way  down  to  one  (although 
this  seems  impractical),  thereby  allowing  a  polygon  to  be  processed  within 
microseconds.  Such  high  resoul ti on  and  high  powered  systems  would  be 
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appropriate,  for  instance,  for  real-time  pilot-training  simulators.  The 
only  difference,  however,  between  these  two  extreme  configurations  would  be 
the  number  of  PE  boards  and  the  number  of  MU  boards.  The  software  in  the 
PE's  of  both  systems  would  be  identical.  The  CBC's  would  be  identical. 

(The  polygons  are  broadcast  in  highest  resolution  units;  low-resolution 
configurations  simply  ignore  some  of  the  least  significant  bits.)  The 
video  scan  generators  could  also  be  identical.  (They  also  run  high-resolu- 
tion  counters;  small  systems  again  simply  ignore  some  least  significant 
bits.)  It  is  reasonable  to  speculate  that  a  large  computing  facility  may 
have  a  number  of  machines,  each  with  a  different  number  of  MU  and  PE 
boards,  many  small  configurations  for  program  development,  a  few  large  ones 
for  real-time  simulation,  and  some  high  resolution  but  slow  ones  for 
non-timecri tical  applications.  For  special  occasions,  larger  configura¬ 
tions  could  easily  be  constructed  by  simply  consolidating  several  small 
configurations.  Also,  faulty  boards  could  simply  be  removed  from  a 
system. 

These  systems  should  also  degrade  gracefully.  Some  current  real-time 
systems  encounter  difficulty  due  to  computations  being  done  "on  the  fly"  as 
the  video  beam  scans  the  image.  Thus,  these  systems  avoid  using  an  image 
buffer  between  the  processing  and  scanning-out  modules.  If  a  certain  spot 
in  the  image  is  particularly  complex,  however,  the  scan  either  has  to  wait, 
or  it  "paints"  incorrect  data.  The  design  presented  here  would  not  exhibit 
such  behavior.  The  system  would  simply  take  slightly  longer  to  compute  the 
new  image.  If  the  memories  were  double  buffered,  the  switch  between  the 
old  image  and  the  new  one  would  be  made  slightly  after  the  start  of  the 
second  scan  of  the  old  image,  or  if  the  situation  were  really  complex,  the 
switch  would  be  made  after  two  or  more  complete  scans  of  the  (old)  image. 

3.0  BUILT-IN-TESTING  AND  FAULT  TOLERANCE 

Since  the  overall  utility  of  these  kinds  of  systems  is  to  a  large  ex¬ 
tent  a  function  of  availability  and  "up"  time,  it  is  essential  to  consider 
the  possibility  of  faulty  components  and  the  consequences  of  such  to  the 
viability  of  the  overall  system.  The  goal,  of  course  then,  is  to  keep  the 
system  (correctly)  operational  whenever  possible.  This  involves  the  design 
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of  built-in-test  facilities  to  detect  and  isolate  and  if  at  all  possible, 
to  establish  recovery  procedures.  Since  the  system  is  primarily  composed 
of  but  two  distinct  modules,  PE's  and  MU's,  we  will  discuss  each  of  them 
separately. 

One  approach  under  consideration  is  to  adopt  standard  double  or  triple 
redundancy  for  either  error  detection  or  error  correction,  respectively  (FT 
reference  here).  A  doubly-redundant  approach,  with  a  comparison  test 
module,  would  be  particularly  easy  to  implement.  As  described  in  the  pre¬ 
ceding  section,  the  design  currently  adopts  the  convention  that  each  PE 
controls  the  MU's  immediately  to  its  right  up  to  the  position  of  the  next 
PE  and  ignores  all  the  signals  going  in  on  its  left  from  the  preceding  PE 
(see  again  Figures  2.8  and  2.9).  We  can  easily  modify  this  convention  by 
inserting  additional  PE's,  for  instance,  as  illustrated  in  Figure  2.10.  In 
such  a  configuration  the  new  PE's,  which  may  physically  be  identical  to  the 
other  PE's  are  indicated  as  TPE  -  0  through  TPE  -  n.  The  processing  is 
modified  as  follows:  The  initialization  procedure  (during  which  time  each 
PE  determines  the  MU's  under  its  control)  is  expanded  to  include  a  second 
phase  during  which  time  each  RPE  determines  the  MU's  under  its  "control", 
which  are  not  to  their  left.  (During  this  procedure  the  TPE's  are  idle, 
simply  passing  all  signals  through.)  During  normal  processing  the  standard 
PE's  operate  as  before,  the  RPE's  operate  as  if  they  were  standard  PE's 
with  the  sole  exception  that  they  generate  their  signals  to  the  left  and 
not  to  the  right.  Each  TPE  then,  simply  compares  the  signals  coming  to  it 
from  its  left  and  right,  an  error  condition  is  indicated  when  they  are  not 
identical . 

Since  we  may  not  normally  expect  a  very  high  fault  rate  for  PE,  we  may 
be  satisfied  at  a  less  expensive  solution,  one  which  utilizes  each  PE  as  an 
RPE  and  to  function  as  an  RPE  and  a  TDE  for  its  neighbor.  This  approach 
would  operate  as  follows.  The  ends  of  the  backplane  bus  would  be  physical¬ 
ly  interconnected,  giving  the  system  a  circularly  linked  interconnection  of 
PE's.  The  initialization  procedure  is  extended  to  include  the  communi¬ 
cation  of  the  just  determined  memorv  assignments  of  each  PE  to  its  right 
neighbor.  This  can  easily  be  achieved  under  CBC  supervision  since  the  PE 
controller  lines  on  each  PE's  left  are  received  (although  ignored  most 
often) . 
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Once  the  memory  assignment  of  a  PE  is  known  to  its  right  neighbor, 
this  neighbor  can  perform  precisely  the  same  algorithm  calculations  as  its 
left  neighbor  and  match  them  against  the  signals  it  receives  from  its  left. 
Since  a  PE  can  either  check  on  its  neighbor  or  perform  its  own  processing, 
normal  generation  would  not  be  divided  into  two  phases:  a)  even  numbered 
PE's  operating  as  usual  and  odd  numbered  PE's  cnecking  and  o)  odd  PE's 
operating  as  usual  and  even  PE's  checking. 

Of  course,  this  is  basically  double  redundancy  without  the  test  PE's, 
and  would  achieve  the  same  performance.  (All  processing  would  have  to  show 
a  BIT  to  allow  the  checking  PE's  to  match  each  of  their  results  with  the 
left  neighbor's.)  The  flexibility  gained  is  that  the  half-running,  half¬ 
checking  operation  mode  does  not  need  to  be  invoked  all  the  time.  If  the 
system  is  judged  sufficiently  reliable  and/or  the  system's  users  can  tol¬ 
erate  some  short-term  faults,  e.g.,  images  overlayed  with  some  erroneous 
"garbage",  then  normal  processing  may  be  utilized,  say  90%  of  the  time  and 
"checking  and  running"  only  the  other  10%.  t  Since  this  ratio  could  be 
dynamically  adjusted  under  software  C8C  direction,  the  system's  speed  vs. 
reliability  can  be  set  appropriately  for  each  specific  task  and/or  based  on 
recent  system  performance. 

Memory  faul t- tolerance  can  be  similarly  "tuned"  by  adding  additional 
MU's  and  having  the  scan  generator  enhanced  to  be  able  to  compare  the  two 
values  it  receives  for  certain  pixels.  In  such  a  version,  the  scan  gener¬ 
ator  would  be  physically  located  in  the  middle  of  the  overall  system. 

In  such  a  configuration  it  would  likely  be  advantageous  to  avoid 
completely  duplicating  the  original  system.  One  solution  would  be  to  have 
the  "checking"  system's  video  image  spacing  arranged  to  duplicate  some 
pixel  locations  in  each  of  the  standard  system's  MU's.  In  this  way,  the 
amount  of  memory  redundance  could  be  controlled  by  varying  the  ratio  of  the 
number  of  MU's  in  the  original  and  "checking"  system.  The  enhanced  VSG 
would  now  have  to  know  which  pixels  were  in  fact  duplicated  and  would  have 
to  know  when  to  check,  since  the  speed  of  the  two  independent  systems  would 
likely  not  be  identical.  With  either  PE  or  MU  components,  once  a  faulty 
unit  is  identified  it  can  either  be  replaced  on  site  or  simply  removed 
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from  the  system.  Of  course,  with  one  fewer  PE  or  MU,  the  system  will 
either  execute  somewhat  slower  (in  the  case  of  faulty  PE,  was  removed). 

Design  of  built-in- testing  and  fault  tolerance  of  the  remaining  two 
single  modules  the  Central  Broadcast  Controller  (CBC)  and  the  Video  Sine 
Generator  (VSG)  are  still  pending.  Two  present  advantages  are  1)  that 
these  modules  comprise  but  two  out  of  perhaps  dozens  in  a  typical 
configuration,  and  2)  that  the  overall  system  design  allow  these  to  be 
implemented  via  the  same  physical  board  site  and  bus  connections  as  the 
other  modules  so  that  on-site  replacement  would  be  virtually  as  simple  as 
for  the  other  system  modules. 

4.0  OTHER  APPLICATIONS 

It  is  easy  to  see  at  this  point  that  the  system  is  not  restricted  to 
simply  executing  a  "Z  buffer"  visible  surface  algorithm.  Software  could  be 
loaded  into  the  PE's,  for  instance,  to  perform  digital  vector  generation 
and  rapidly  create  line  drawings  on  the  video  screen.  In  this  case,  the 
CBC  would  simply  broadcast  endpoint  information,  each  of  the  PE's  would 
determine  the  pixels  under  its  control  which  are  affected  by  the  new  line 
segment;  it  would  then  set  each  of  these  pixels  appropriately. 

5.0  IMPLEMENTATION 

We  are  currently  in  the  process  of  implementing  various  aspects  of  the 
above  design.  We  have  prototyped  simple  versions  of  each  module  and  plan 
to  have  a  small,  but  complete  prototype  system  in  the  near  future. 
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A  short  survey  of  the  applicability  of  various  visible  surface  algo¬ 
rithms  for  distributed  processing  will  aid  in  understanding  the  approach 
we  have  developed  for  our  own  design. 

Sutherland,  Sproull,  and  Schumacker  (1974)  classify  the  various  vis¬ 
ible  surface  algorithms  into  object  space,  image  space,  and  list  priority 
algorithms.  Object  space  algorithms  (e.g.,  Roberts  (1963),  Appel  (1967)) 
process  the  environment's  object  parts  sequentially  and  determine,  for  each 
such  part,  whether  or  not  it  is  visible.  Image  space  algorithms,  (e.g., 
Bouknight  (1969),  Watkins  (1970),  on  the  other  hand,  take  each  part  of  the 
image  sequentially  and  determine  for  each  such  image  area;  eventually  a 
single  pixel  which  object  parts  is  visible  there.  List  priority 
algorithms,  e.g.,  Schumacker,  et.  al .  (1969).  Newell,  et.  al .  (1972) 
determine  some  ordering  on  the  list  of  polygons  in  the  environment,  either 
from  farthest  to  closest  to  the  viewer  or  some  other  arrangement  based  on 
geometric  relations  between  the  polygons.  With  such  an  approach  the 
visible  polygon  at  each  pixel  is  simply  the  highest  priority  polygon  which 
maps  onto  it. 

Let  us  consider  the  suitability  of  these  various  approaches  for  dis¬ 
tributed  execution.  An  obvious  approach  for  distributing  work  load  of  an 
object  space  algorithms  would  be  to  divide  the  various  objective  parts  be¬ 
tween  the  available  processors  in  the  system.  This  approach  would  encount¬ 
er  difficulty  in  at  least  two  places:  in  order  to  determine  the  visibility 
of  any  object  part,  possibly  all  the  other  objects  would  have  to  be  ex¬ 
amined.  Thus,  each  processor  would  need  to  have  constantly  available  the 
entire  set  of  possibly  visible  polygons.  In  addition  to  this,  the  results 
of  all  the  visibility  calculations  need  to  be  put  onto  the  screen.  The  two 
alternatives  for  this  part  are,  a)  to  have  a  real-time  scan  generator  which 
calculates  the  intensity  values  as  the  video  beam  is  scanning  the  display 
screen,  or  b)  to  have  an  image  memory  buffer  ("frame  buffer")  in  which  the 
image  pixels  are  put  as  they  are  determined  and  have  the  image  scanned  out 
from  this  buffer  (See  Figure  IV -A. I). 

The  first  alternative  would  certainly  be  difficult  in  this  case,  since 
the  values  for  the  scan  would  be  randomly  distributed  among  the  various 
processors,  and,  in  general,  even  in  a  single  process,  the  scan  order  of 
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Figure  IV-A.l  Real-Time  Image  Buffer 
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the  various  object  parts  would  need  to  be  scan  order,  not  in  object-space 
order.  The  alternate  approach,  that  of  putting  the  results  from  the  var¬ 
ious  processors  into  a  frame  buffer  from  which  the  scan  generators  "read 
out"  the  image,  would  most  likely  suffer  from  excessive  contention  for  the 
frame  buffer.  As  the  various  processors  all  attempt  to  write  all  their 
information  into  the  frame  buffer,  the  bandwidth  of  a  large  random  access 
buffer  (assuming  700  msec  cycle  time  and  50%  time  division  multiplexing 
between  the  scan  generator  and  the  image-determining  processors)  leaves 
less  than  12,000  total  accesses  for  all  the  processors  during  each  frame 
time.  One  may  wish  to  partition  the  frame  buffer  into  a  number  of  smaller 
units  in  order  to  overcome  this  bandwidth  limitation,  but  since  each 
processor's  visible  object  parts  can  be  expected  to  be  randomly  distributed 
in  the  image,  there  will  then  need  to  be  data  paths  between  each  processor 
and  each  memory  (see  Figure  IV-A.2). 

List  priority  algorithm  may  be  more  applicable  to  distributed  proces¬ 
sing.  In  fact,  one  of  the  earliest  real-time  systems  (GE)  is  based  on  a 
list-priority  algorithm.  This  particular  type  of  priority  is  based  on  a 
geometric  relationship  between  object  polygons  and,  as  such,  needs  only  to 
be  calculated  once  for  a  rigid  environment  and  is  largely  independent  of 
the  simulated  viewing  position.  To  calculate  this  relationship,  however, 
the  system  often  needs  expert  manual  intervention  to  modify  the  environ¬ 
ment's  definition.  This  requirement  significantly  detracts  from  the  appeal 
of  this  approach.  The  other  well-known  list  of  priority  algorithm  Newell, 
et.  al.  (1972)  orders  the  list  of  polygons  from  back  to  front,  from  the 
polygon  farthest  from  the  viewer  to  the  one  closest  to  the  viewer,  thers  ' 
"paints"  the  polygons  into  the  frame  buffer  in  this  order.  A  polygon  which 
obscures  another  one  behind  it  would  be  encountered  after  the  obscured  one 
in  the  ordered  list;  it  would  thus  "paint  over"  the  more  distant  polygon. 

The  applicability  of  this  approach  to  distributed  processing  is  cer¬ 
tainly  not  obvious  since  the  major  step  is  a  rather  elaborate  sort  involv¬ 
ing  the  entire  set  of  potentially  visible  polygons.  Although  parallel 
sorting  methods  may  be  useful  here  (Hirschberg  (1978)),  the  situation  is 
complicated  by  the  lack  of  a  single  sorting  key.  The  sort,  rather,  in¬ 
volves  the  "visibility  priority"  or  the  "obscuring  level"  of  the  various 
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Figure  IV-A.2  Frame  Buffer  Partitioned  into  Smaller  Units 
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polygons.  The  required  condition  is  that  if  polygon  A  obscures  polygon  8 
then  A  must  not  be  placed  before  B  in  the  “painting"  list.  It  is  simple  to 
demonstrate  that  this  kind  of  an  ordering  may  not  even  exist  for  some  sets 
of  polygons  (see  Figure  IV-A3.).  In  such  cases,  polygons  have  to  be  split 
into  pieces  until  a  strict  ordering  can  be  established.  Even  if  such  an 
involved  sorting  could  be  distributed  over  multiple  processors,  the  basic 
method  of  determining  visibility  by  “painting  over"  nearer  polygons  seems 
to  imply  a  sequential  process  moving  from  back  to  front.  The  list  could, 
of  course,  be  split  separately  computed  by  a  single  processor  with  a 
separate  image  buffer.  The  final  image  would  then  consist  of  the  various 
image  buffers  merged  in  the  appropriate  priority  order  by  the  scan 
generator  (see  Figure  IV-A.4).  The  expense  of  a  full  image  buffer  with 
each  processor  makes  this  approach  rather  impractical. 

Object  space  algorithms  are  rather  more  appealing  for  possible  distrib¬ 
uted  processing.  An  obvious  approach  would  be  to  distribute  the  work  load 
among  the  various  processors  by  partitioning  the  image  between  them.  Scan 
line  order  algorithms,  such  as  Watkins  (1970),  could  be  implemented  in  this 
fashion  by  assigning  various  scan  lines  to  different  processors.  The 
complicated  nature  of  these  algorithms  and  their  reliance  on  incremental 
processing,  calculating  one  scan  line  is  basically  a  modification  of  the 
data  on  the  previous  scan  line,  makes  this  approach  difficult. 

The  algorithm  by  Warnock  (1969)  basically  considers  the  set  of  poly¬ 
gons  involved  in  a  particular  area  of  the  screen.  If  there  are  too  many, 
then  it  partitions  the  area  into  (usually)  four  regions,  creating  a  larger 
number  of  problems  to  solve,  but  each  of  them  simpler  to  solve  than  their 
common  predecessor  (or  at  the  very  least  no  more  complicated).  Infinite 
recursive  subdivision  is  avoided  by  the  realization  that  once  the  area  is 
that  of  a  single  pixel,  the  system  can  simply  find  the  closest  polygon. 

The  algorithm  capitalizes  on  the  characteristic  that  almost  all  images 
contain  many  empty  and  many  very  simple  regions. 

This  approach  seems  difficult  to  adopt  for  distributed  processing 
since  the  work  load  is  a  function  of  area,  but  the  areas  are  not  evenly 
distributed  across  the  full  image.  Although  some  appropriately  intercon¬ 
nected  network  of  processors  could  possibly  be  used  to  solve  the 
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visibility  problem  in  this  fashion  (Dispain  and  Patterson  (1977)),  with  one 
processor  activating  several  others  whenever  an  area  is  subdivided,  it 
seems  that  the  contention  for  the  image  buffer  by  the  various  processors 
would  still  remain  as  intractable  as  before. 

A  recent  visible  surface  algorithm  by  Weiler  and  Atherton  (1977)  is  in 
some  ways  an  appealing  combination  of  that  by  Warnock  (1969)  and  that  by 
Newell,  et.  al.,  (1972),  but  seems  equally  difficult  to. adapt  to  a 
distributed  organization  for  some  of  the  same  reasons  as  those  of  its 
mentioned  predecessors. 


